No

Purpose

Legal Basis: GDPR and DPA 2018 (where appropriate)

1

To third parties such as the Higher Education Attainment Tracker (HEAT) and the National Collaborative Outreach Programme (NCOP) in order to allow the monitoring of engagement, evaluation and research into the recruitment and outreach activities that we provide.

Legitimate Interest, Substantial Public Interest - DPA 2018, Schedule 1, Part 2, paragraph 8, Equality of opportunity or treatment under equality legislation

2

As part of processing your application we will share with UCAS information regarding the status of your application, and any changes to the decision, including changes of course or year of entry.

Public Task, Contract




Public Task, Substantial Public Interest - DPA 2018, Schedule 1, Part 2, paragraph 10, Preventing or detecting unlawful acts

We may also share information with the UCAS Verification Team in relation to potential fraud and to share circumstances relating to exceptional requests for changes from applicants.

3

If you are an International student we may share your information with one of our agents to make sure you get the support you need for applying to Lancaster University.

Consent

4

If you are an INTO Lancaster University student any pastoral, welfare or disciplinary information that the University holds about you may be shared with INTO.

Consent, Legitimate Interests

5

If you are interviewed as part of your application process we may share your information with external interviewers.

Contract

6

To data processors such as Turnitin to identify any instances of collusion in relation to your application to Lancaster University.

Contract

7

If you are applying to Lancaster Medical School we will share your details with Cambridge Assessment Admissions Testing to allow us to obtain your BMAT scores.

Contract

No

Purpose

Legal Basis: GDPR and DPA 2018 (where appropriate)

1

To IT providers delivering externally hosted IT services or products such as Microsoft.

Contract

2

To the UK Visa and Immigration department in relation to International Students including as part of the process to obtain your CAS number.

Public Task, Legal Obligation related to UKVI obligations under immigartion legislation

3

To notify relevant departments within the University and other organisations e.g. the health centre, pre-school centre if you withdraw of defer your studies.

Legitimate Interest

4

To notify relevant organisations e.g. GMC, research councils if you withdraw or defer your studies.

Legal Obligation

5

If you are a student at one of our international or regional teaching partnerships organisations we will share information in relation to the administration of your student record.

Contract

6

To organisations providing indemnity insurance for students engaged in professional practice placements e.g. medical placements.

Contract

7

With appropriate accommodation service partners to enable them to provide maintenance and repair services.

Contract, Legitimate Interests

8

If you previously attended INTO Lancaster University and progress to a Lancaster University course we will share information with INTO including your academic performance, exam results and career progression.

Legitimate Interests

9

If we believe a complaint may result in a legal claim being made against the University, we will share relevant and appropriate data with the University insurers and legal representatives. Depending on the details of the complaint/legal claim, this may include both personal and special category data.

Legitimate Interests

No

Purpose

Legal Basis: GDPR and DPA 2018 (where appropriate)

1

To external examiners for the purpose of assessment.

Public Task

2

To partner colleges and Universities and providers of student placements e.g. Blackburn College, Beijing Jiaotong University for administration, teaching and assessment purposes.

Public Task

3

To professional bodies where registration with that body is a requirement or is complimentary to your course e.g. General Medical Council, the Chartered Institute of Marketing and the Health and Care Professions Council.

Public Task

4

To data processors processing your data on behalf of the University for the provision of academic and other services e.g. Turnitin to identify instances of collusion in relation to plagiarism misconduct.

Public Task

5

Your data on awards is transferred to a third party provider such as the Qualification Check so that your qualifications can be automatically verified by paid for service.

Consent

No

Purpose

Legal Basis: GDPR and DPA 2018 (where appropriate)

1

To organisations offering placements e.g. Erasmus and Study Abroad including British Council and destination placements e.g. social work study placements, NHS trusts.

Public Task, Contract

2

If you have engaged with the disability service your Inclusive Learning Support Plan (ILSP) and/or information about your disability or long term medical condition will be shared with your placement provider/host institution in order that:

Public Task, Legal Obligation, Substantial Public Interest - DPA 2018, Schedule 1, Part 2, paragraph 8, Equality of opportunity or treatment under equality legislation


Public Task, Legal Obligation, Substantial Public Interest - DPA 2018, Schedule 1, Part 2, paragraph 6, Statutory and government purposes linked to Health and Safety legislation

appropriate arrangements can be made;

to ensure the health and safety of yourself and others whilst you are on placement.

3

To arrange accommodation for placements e.g. clinical placements.

Public Task

4

If you are a medical student data will be transferred to the foundation school in year 5 of your studies so that a placement will be arranged for your foundation year training.

Public Task

No

Purpose

Legal Basis: GDPR and DPA 2018 (where appropriate)

1

To external panel members of a fitness to practice hearing.

Public Task, Legal Obligation, Substantial Public Interest - DPA 2018, Schedule 1, Part 2, paragraph 11, Protecting the public against dishonesty or DPA 2018, Schedule 1, part 2, paragraph 18, Safeguarding of children and of individuals at risk

2

To report to the General Medical Council (GMC), Health and Care Professions Council and NHS trust as relevant, any student who has had a penalty imposed as a result of a fitness to practice case.

Public Task, Legal Obligation, Substantial Public Interest - DPA 2018, Schedule 1, Part 2, paragraph 11, Protecting the public against dishonesty or DPA 2018, Schedule 1, part 2, paragraph 18, Safeguarding of children and of individuals at risk

3

To report to the Medical Schools Council, Health and Care Professions Council and NHS trust as relevant, any student who has had their studies terminated on the basis of a fitness to practice case.

Legal obligation, Public Task, Substantial Public Interest - DPA 2018, Schedule 1, Part 2, paragraph 11, Protecting the public against dishonesty or DPA 2018, Schedule 1, part 2, paragraph 18, Safeguarding of children and of individuals at risk

No

Purpose

Legal Basis: GDPR and DPA 2018 (where appropriate)

1

To your family, nominated third parties, sponsors, bank or other payment channels to enable payments to be made on your behalf.

Consent

2

To external agents of the University in relation to the repayment of students debts, where internal recovery attempts have not been successful.

Contract

3

To sponsors, including the UK research councils, the Student Loan Company and sponsors overseas to administer your student fees and confirm enrolment on course and payment.

Contract

4

To grant funding bodies such as the medical research council including contact details of students undertaking grant funded work.

Contract

5

To external bodies and individuals who have funded student prizes, awards and scholarships.

Legitimate Interest

6

To organisations providing banking and online payment processing services.

Contract

7

If you are employed by an NHS trust as part of a placement we will share information with their payroll and HR departments.

Contract

No

Purpose

Legal Basis: GDPR and DPA 2018 (where appropriate)

1

To professional and industrial bodies wishing to communicate with students about career opportunities and membership of their body.

Public Task

2

To provide you with references either whilst you are a student or once you have completed your studies at Lancaster University.

Consent / Explicit Consent

3

When the University or an external body such as a Research Council or the Student Loan Company is funding support for reasonable adjustments the University may share your information with appropriate external support agencies in order that you get the help that you need.

Public Task

4

To the Lancaster University Students’ Union for registration as a member of the Union.

Legitimate Interest

5

With third parties who help us to monitor IT network infrastructure, traffic and connected devices and users in order to improve services, identify security issues and to comply with legal and contractual obligations

Legal Obligation, Legitimate Interest

No

Purpose

Legal Basis: GDPR and DPA 2018 (where appropriate)

1

To the police or other regulatory body where pursuant to the investigation or disclosure of a potential crime.

Legitimate Interest

2

To close family, your emergency contact/s, next of kin and the emergency services when necessary to protect life of yourself or another person.

Vital Interests, Consent, Explicit Consent

3

To the University's insurers in respect of accidents or incidents occurring with the institution and external auditors and regulators such as the Health and Safety Executive.

Legal Obligation, Substantial Public Interest - DPA 2018, Schedule 1, Part 2, paragraph 6 Statutory or government purposes under relevant Health and safety legislation

4

Where deemed necessary, with appropriate agencies in order to fulfil the University's obligations under the Prevent duty.

Legal Obligation, Substantial Public Interest - DPA 2018, Schedule 1, Part 2, paragraph 6 Statutory or government purposes under the relevant Prevent and other appropriate anti-terror legislation