Data Protection Privacy Notice & HESA Notices
Edinburgh Napier University is a data controller for the purposes of data protection legislation (“the legislation”), the General Data Protection Regulation: EU 2016-679 (“GDPR”) and the UK Data Protection Act 2018 (“DPA 2018”) and processes personal data strictly in line with the legislation and its notification to the UK Information Commissioner’s Office (ICO) who regulate the legislation in the UK. The University is committed to compliance with the legislation and protecting all personal data it processes.
Due to the Covid-19 pandemic the University is required to collect personal data for the Scottish Government's 'Track and Protect' initiative. Existing Privacy Notices (below) already make allowance for this under Article 6(1)(f) processing is in the legitimate interests of individuals and the University for public health purposes, and Article 9(2)(i) processing is necessary for reasons of public interest in the area of public health, etc. The University has appropriate measures in place to ensure processing is compliant with Data Protection legislation.
For Asymptomatic testing please see the following Privacy Notice: Asymptomatic Covid-19 Testing Privacy Notice
Below are the University's main overarching Privacy Notices, followed by links to the HESA notices and the University's layered Privacy Notices specific to certain processes.
Student Recruitment Privacy Notice
Download the Student Recruitment Privacy Notice
Student Applicant Privacy Notice
Download the Applicant Privacy Notice
Student Privacy Notice
Download the Student Privacy Notice
Staff Privacy Notice
Download the Staff Privacy Notice
Court Member Privacy Notice
Download the Court Members Privacy Notice
Alumni Privacy Notice
The Privacy Notice for Alumni can be found online using the following link:
Alumni Privacy Notice
Research Privacy Notice (Generic)
This privacy notice provides some general information about processing taking place for a wide variety of research projects. If you are a participant in a research project you will be provided with a specific privacy notice along with the participant information.
Download the Generic Research Privacy Notice
Higher Education Statistics Agency (HESA) Data Protection Notices
The University is legally required to send some information to the Higher Education Statistics Agency (HESA). The links below explain how HESA will use the information.
View the 
HESA Student Collection Notice
View the HESA Staff Collection Notice
View the HESA Destinations of Leavers from HE (DLHE) Collection Notice (for leavers up to the end of 2016/17)
View the HESA Graduate Outcomes survey information (for leavers from 2017/18 onwards)
View the Edinburgh Napier University Graduate Outcomes Privacy Notice and information here: https://www.napier.ac.uk/alumni/graduate-outcomes
Additional 'Layered' Privacy Notices
Template Privacy Notice (for internal staff use)
Where 'layered' Privacy Notices are required in addition to the main Privacy (Processing) Notices detailed above colleagues are required to complete the template form provided below and return this to Governance Services (dataprotection@napier.ac.uk) for approval:
Privacy Notice template
Page last updated 13 January 2023