Data Protection Privacy Notices & HESA Notices
Edinburgh Napier University is a data controller for the purposes of data protection legislation (“the legislation”), the General Data Protection Regulation: EU 2016-679 (“GDPR”) and the UK Data Protection Act 2018 (“DPA 2018”) and processes personal data strictly in line with the legislation and its notification to the UK Information Commissioner’s Office (ICO) who regulate the legislation in the UK. The University is committed to compliance with the legislation and protecting all personal data it processes.
Below are the University's main overarching Privacy Notices, followed by links to the HESA notices and the University's layered Privacy Notices specific to certain processes.
Student Privacy Notice
Download the Student Privacy Notice 2017/18
Staff Privacy Notice
Download the Staff Privacy Notice
Court Member Privacy Notice
Download the Court Members Privacy Notice
Alumni Privacy Notice
The Privacy Notice for Alumni can be found online using the following link:
Alumni Privacy Notice
Higher Education Statistics Agency (HESA) Data Protection Notices
The University is legally required to send some information to the Higher Education Statistics Agency (HESA). The links below explain how HESA will use the information.
View the 
HESA Student Collection Notice
View the HESA Staff Collection Notice
View the HESA Destinations of Leavers from HE (DLHE) Collection Notice (for leavers up to the end of 2016/17)
View the HESA Graduate Outcomes survey information (for 2017/18 leavers)
Additional 'Layered' Privacy Notices
Template Privacy Notice (for internal staff use)
Where 'layered' Privacy Notices are required in addition to the main Privacy (Processing) Notices detailed above colleagues are required to complete the template form provided below and return this to Governance Services (dataprotection@napier.ac.uk) for approval:
Privacy Notice template
Page last updated 04 July 2018