Legal obligation

Processing personal data where there is a legal obligation

Processing personal data for any statutory or legal obligation imposed on the University is legitimate if the processing is necessary to comply with that obligation.

Example:

Sending staff data for tax purposes to HMRC, or sending student data to the UKVI  regarding visa applications.

This article was published on