The Data Protection Act 1998 gives people the right to know what information is held about them, and requires the University to ensure that personal information relating to living individuals is handled properly, held in confidence and protected from disclosure to a third party without the permission of the person about whom it is recorded.
All data are kept secure and comply with all PCI DSS and data protection legislations.