Data Protection

London South Bank University is committed to protecting people's rights and privacy in line with the Data Protection Act 1998 (DPA). The Act applies to all personal data; whether held on a computer or a similar automatic system or held as part of a structured manual filing system.

We hold personal data about individuals such as students, graduates, employees and others, defined as Data Subjects in the Act. In order to comply with the Act, information about individuals must be collected and used fairly, stored safely and securely and not disclosed to any third party unlawfully.

The University processes all the personal data it holds in accordance with the DPA and within the terms of our Notification to the Information Commissioner’s Office.

Data Protection Policy

The University’s Data Protection policy sets out the University’s rules and guidelines relating to holding, processing and dealing with information, materials and data about living individuals by LSBU and its employees and is designed to bring together the rights and obligations as set out in the Data Protection Act 1998 and current best practice based on the guidance and other publications of the Information Commissioner.

Data Protection Policy (PDF 68KB)

The University’s CCTV policy sets out the rules and guidelines for the closed circuit television (CCTV) systems installed at London South Bank University in accordance with the requirements of the Data Protection Act 1998 (DPA) and the Code of Practice (CCTV Code) issued by the Information Commissioner.  The CCTV systems at LSBU are registered as part of the University’s entry on the Data Protection register which is held by the Information Commissioner.

CCTV Policy (PDF 62KB)

Accessing your personal data

Data Protection enquiries contact details

Director of University Archives and Information Compliance
London South Bank University,
103 Borough Road,
London SE1 0AA

dpa@lsbu.ac.uk

As a Data Subject you have the right to access personal data held about you on computer and in structured manual files by the University. If you are not the person who is the subject of the held data you do not have any right to access it unless you have written consent from the Data Subject with proof of both your identities ie copy of passport details.

The University is required to permit individuals to access their own personal data held by the University by submitting a Subject Access Request to the University.

The procedure is as follows:

  1. Subject Access Requests must be made in writing (this includes email) by the Data Subjects addressed to the Director of University Archives and Information Compliance, who is the University’s Data Protection Officer.
  2. Data Subjects should provide enough information on themselves to make them clearly identifiable (for example student numbers).
  3. A Subject Access Request application form will be sent to the requestor by the Director of University Archives and Information Compliance.
  4. The form has to be completed in full and submitted together with proof of identity (for example, a copy of a passport).
  5. The Act permits Data Controllers to levy an administrative fee of £10. The amount should be made payable to "London South Bank University".
  6. The administrative fee should be received by theDirector of University Archives and Information Compliance before any Subject Access Request is processed.
  7. In accordance with the Act, all Subject Access Requests will be dealt with within 40 calendar days.
  8. It is important that all personal information held by the University on an individual who has submitted a Subject Access Request is not subjected to any special amendment or deletion that would not otherwise have been made.
  9. The relevant information will be provided to the Data Subject confidentially either by registered mail or in person.
  10. Only those specific pieces of information to which exemption applies will be withheld.
  11. Data Subjects are always informed about the progress of their request, including any decision not to release any data or any reason(s) for delaying a response.

Publication Date: January 2010
Review Date: January 2015

Data Protection Notification

The Information Commissioner's Office (ICO) maintains a public register of organisations that use personal data. Each organisation is obliged to notify the ICO with details of the types and purposes of personal data it processes.

London South Bank University is registered under the following references:

  • London South Bank University - Z6533032
  • London South Bank University Students' Union - Z7436913
  • South Bank University Enterprises Ltd - Z7358971

Notification details can be accessed by searching the Data Protection Public Register.

Further information