Information about you: how we use it and with whom we share it The information you provide will be used by the University to enable you to access an online tool to complete a Data Protection Impact Assessment (DPIA). The DPIA will be retained as evidence that the appropriate assessment of privacy risks was completed for an activity, project or system. The University uses the platform of an external company, OneTrust, to host the assessment tool on the University’s behalf. We are using information about you because processing is performed in the exercise of official authority vested in the University, in this case to demonstrate compliance with the requirements of data protection legislation. We will hold the personal data you provided us in the assessment for 10 years after the end of the activity for which the DPIA was completed. If you have any questions, please contact dpo@ed.ac.uk This privacy statement is continued Continued privacy statement This article was published on 2023-11-09