• Home
  • Login
  • Welcome to the Staff Intranet

Data Protection Privacy Notice & HESA Notices


Edinburgh Napier University is a data controller for the purposes of data protection legislation (“the legislation”), the General Data Protection Regulation: EU 2016-679 (“GDPR”) and the UK Data Protection Act 2018 (“DPA 2018”) and processes personal data strictly in line with the legislation and its notification to the UK Information Commissioner’s Office (ICO) who regulate the legislation in the UK. The University is committed to compliance with the legislation and protecting all personal data it processes.

Due to the Covid-19 pandemic the University is required to collect personal data for the Scottish Government's 'Track and Protect' initiative. Existing Privacy Notices (below) already make allowance for this under Article 6(1)(f) processing is in the legitimate interests of individuals and the University for public health purposes, and Article 9(2)(i) processing is necessary for reasons of public interest in the area of public health, etc. The University has appropriate measures in place to ensure processing is compliant with Data Protection legislation. 

For Asymptomatic testing please see the following Privacy Notice: Asymptomatic Covid-19 Testing Privacy Notice​

Below are the University's main overarching Privacy Notices, followed by links to the HESA notices and the University's layered Privacy Notices specific to certain processes. 


Image of a folder marked confidential

 Student Recruitment Privacy Notice

Download the Student Recruitment Privacy Notice​


Student Applicant Privacy Notice

Download the Applicant Privacy Notice


Student Privacy Notice

Download the Student Privacy Notice


Staff Privacy Notice

Download the Staff Privacy Notice


Court Member Privacy Notice

Court_Members_Privacy_Notice.pdfDownload the Court Members Privacy Notice


Alumni Privacy Notice

 The Privacy Notice for Alumni can be found online using the following link:Alumni Privacy Notice


Research Privacy Notice (Generic)

This privacy notice provides some general information about processing taking place for a wide variety of research projects. If you are a participant in a research project you will be provided with a specific privacy notice along with the participant information.

Download the Generic Research Privacy Notice​ 


Image of a clipboard and penHigher Education Statistics Agency (HESA) Data Protection Notices

The University is legally required to send some information to the Higher Education Statistics Agency (HESA). The links below explain how HESA will use the information.


View the HESA Student Collection Notice


View the HESA Staff Collection Notice


View the HESA Destinations of Leavers from HE (DLHE) Collection Notice (for leavers up to the end of 2016/17)


View the HESA Graduate Outcomes survey information (for leavers from 2017/18 onwards)


View the Edinburgh Napier University Graduate Outcomes Privacy Notice and information here: https://www.napier.ac.uk/alumni/graduate-outcomes​ 


Additional 'Layered' Privacy Notices

Template Privacy Notice (for internal staff use)

Where 'layered' Privacy Notices are required in addition to the main Privacy (Processing) Notices detailed above colleagues are required to complete the template form provided below and return this to Governance Services (dataprotection@napier.ac.uk) for approval:

Privacy Notice template​


                                                                                                                   Page last updated 13 January 2023​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​​