Guidance for processing personal data

Guidance is available for colleagues who are processing new personal data.

Getting data processing right

Stock image to highlight need to minimise risks of processing personal data. July 2019

Updated data protection legislation requires that anybody processing personal data must demonstrate they have considered and minimised the risk to individuals. This is done via the completion of a Data Privacy Impact Assessment (DPIA).

This has already been completed for normal work practices at Leeds. But you may need to conduct your own DPIA if you are planning on undertaking new work involving any of the following:

  • personal data of lots of individuals
  • personal data of vulnerable individuals
  • very sensitive personal data; or
  • personal data that requires the use of new technology to be processed.

There is more guidance on our Data Protection website, or please contact Alice Temple or Rebecca Messenger-Clark for further information.

Posted in: