Guidance for processing personal data
Guidance is available for colleagues who are processing new personal data.
Getting data processing right

Updated data protection legislation requires that anybody processing personal data must demonstrate they have considered and minimised the risk to individuals. This is done via the completion of a Data Privacy Impact Assessment (DPIA).
This has already been completed for normal work practices at Leeds. But you may need to conduct your own DPIA if you are planning on undertaking new work involving any of the following:
- personal data of lots of individuals
- personal data of vulnerable individuals
- very sensitive personal data; or
- personal data that requires the use of new technology to be processed.
There is more guidance on our Data Protection website, or please contact Alice Temple or Rebecca Messenger-Clark for further information.
Posted in: University news