# Division of General Counsel, Governance and Compliance

**Source**: https://www.sussex.ac.uk/ogs/policies/information/dpa/dataprotectionpolicy
**Parent**: https://student.sussex.ac.uk/international/visas

# Data Protection Policy

Data protection is about the fair and appropriate use of information relating to identifiable individuals, and it is a crucial part of building trust between people and organisations.

The University has a duty to comply with the principles and requirements of data protection legislation when processing personal data. Failure to do so could have significant financial, regulatory and reputational impacts for the University.

The purpose of the Policy is to:

- Outline the data protection principles and define key terms;
- Detail the rights of data subjects;
- Lay out the University’s obligations under data protection legislation; and
- Make clear the specific responsibilities for compliance within the University.

[Data Protection Policy](https://www.sussex.ac.uk/ogs/documents/data-protection-policy.pdf "Data Protection Policy") (last version uploaded November 2025)

**Last updated 9 February 2026**