Destruction of Personal Data
Further guidance on the retention and destruction of records containing personal data is available in Section 20 of the Data Protection Code of Practice.
Guidance on the Safe Disposal of Confidential Waste
The Data Protection Act and the Freedom of Information Act impose specific requirements about the timely and secure disposal of information, both paper and electronic. This guidance note sets out what you need to know.
Download the Guidance on Safe Disposal of Confidential Waste
Retention and Destruction of Records
The University has to ensure that it has complied with statutory requirements for the retention of records under Data Protection Legislation (GDPR and DPA 2018), Freedom of Information (Scotland) Act or Environmental Information Regulations. Guidance on the retention and then destruction of records is available above in the guidance note on the Safe Disposal of Confidential Waste. When it has been established that a record can be destroyed a record of that destruction, the basis on which this was done (e.g. in accordance with a legal requirement) and the method used must be kept by the area in which the destruction took place. This is the University's form for this purpose.
Download the Record Disposal Form
The University's Records Retention Schedules provide further information relating to the retention and disposal of records, including personal data.