Data protection and freedom of information

Data Protection

The eight principles of the Data Protection Act are to make sure that personal information is:

1. Fairly and lawfully processed
2. Processed for limited purposes
3. Adequate, relevant and not excessive
4. Accurate and up to date
5. Not kept for longer than is necessary
6. Processed in line with your rights
7. Secure
8. Not transferred to other countries without adequate protection

• Data protection at the University of Leeds
• Data protection, anonymisation and sharing research data - University Protocol
• Information Management Guide

Freedom of Information

• University of Leeds information

Putting the Data Protection Act into practice:

The Research Data Management section contains advice and information on

• Securing and storing research data
• Confidentiality and anonymisation
• Intellectual property
• Open access publication
• Research data policy