Student and staff data: DPIA
Dear The Universities and Colleges Admissions Service,
With regards to the processing of any student or Higher Education staff personal data, please provide your most recent Data Protection Impact Assessment(s) regards processing or data that you control, and that may contain “protected characteristics” of age, disability, gender reassignment, race, religion or belief, pregnancy and maternity, sexual orientation and, in certain circumstances, marriage and civil partnership.
For example but not only, with regards to personal data originaly sourced through the Higher Education admissions process.
Thank you for your consideration.
Sincerely,
Jen Persson
Dear Jen
FOI-2020-07-08-01
Thank you for requesting information from UCAS under the Freedom of Information Act 2000 (FOIA).
UCAS will respond on or before 5 August 2020, the date on which the 20 working day response period permitted by FOIA ends.
I, or one of my colleagues, may need to contact you again if the request needs to be clarified. If this happens, UCAS may respond later than the date indicated above as permitted by FOIA.
Kind regards,
Jessica
Jessica Heron
Information Governance Officer
www.ucas.com
Rosehill | New Barn Lane | Cheltenham | GL52 3LZ
Registered office as above. Registered company No 2839815.
Registered charity No. (England and Wales) 1024741 and (Scotland) SCO38598.
Dear Jen
FOI-2020-07-08-01
Further to your request for information please find below the response from UCAS in regard to the specific information you have requested.
UCAS may process data that contains "protected characteristics", but it depends entirely on what individuals have chosen to share with us. Age is the only characteristic mentioned that we would definitely have, as providing a date of birth is mandatory.
I attach our two most recent Privacy Impact Assessments relating to use of personal data: Virtual Events and Clearing Plus. Please note that there have been some redactions where there is personal data (Section 40 exemption) or it would prejudice our commercial interests (Section 43(2) exemption).
If you are not satisfied with the way in which we have responded to your request you may:
1) Contact us requesting that this matter is reviewed internally by UCAS. Your request will then be subject to our internal review process.
2) If you remain dissatisfied with the outcome of your internal review, you can contact the Information Commissioner's Office. The Information Commissioner can be contacted at: The Information Commissioner's Office,
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, telephone 0303 1231113, or for further details see their website www.ico.org.uk
Kind regards,
Jessica
Jessica Heron
Information Governance Officer
www.ucas.com
Rosehill | New Barn Lane | Cheltenham | GL52 3LZ
Registered office as above. Registered company No 2839815.
Registered charity No. (England and Wales) 1024741 and (Scotland) SCO38598.
Dear FOI,
with reference to your reply FOI-2020-07-08-01 please can you reply with the information requested, namely not only the two most recent for *some* of your processing of protected characteristics, but that covers *all* of the processing activity including the routine applicant admissions process, not only virtual events or the new product Clearing Plus. i.e. If I am a Sxith Form student applying through UCAS to university admissions -- please provide the DPIA that covers that process in which protected characteristics might be processed if the applicant includes them.
Part of the reply should be to confirm that you hold that information and the grounds on which you have chosen not to release it OR confirm if you do not have a DPIA for that process.
"with regards to the processing of any student or Higher Education staff personal data, please provide your most recent Data Protection Impact Assessment(s) regards processing or data that you control, and that may contain “protected characteristics” of age, disability, gender reassignment, race, religion or belief, pregnancy and maternity, sexual orientation and, in certain circumstances, marriage and civil partnership.
For example but not only, with regards to personal data originaly sourced through the Higher Education admissions process."
Thank you.
Sincerely,
Jen Persson
Dear Jen
FOI-2020-07-08-01
Thank you for your further email.
As you are not satisfied with the way in which we have responded to your request, we will now conduct an internal review.
UCAS will provide a response within 20 working days.
Kind regards,
Jessica
Jessica Heron
Information Governance Officer
www.ucas.com
Rosehill | New Barn Lane | Cheltenham | GL52 3LZ
Registered office as above. Registered company No 2839815.
Registered charity No. (England and Wales) 1024741 and (Scotland) SCO38598.
Dear Ms Persson
Further to your request for internal review of the handling of your FOI request please find attached a copy of the review.
As noted in the review should you remain dissatisfied with UCAS’ handling of your request you have a right to review by the Information Commissioner’s Office www.ico.org.uk
Kind regards
Mark
Mark Knight
Information Governance Manager
www.ucas.com
Rosehill | New Barn Lane | Cheltenham | GL52 3LZ
Registered office as above. Registered company No 2839815.
Registered charity No. (England and Wales) 1024741 and (Scotland) SCO38598.
We work to defend the right to FOI for everyone
Help us protect your right to hold public authorities to account. Donate and support our work.
Donate Now