The University receives many requests for information and they can be directed to any member of University staff. Requests can include enquiries from students, family members, the police, national embassies, other University staff or external organisations. It is important to handle these appropriately.

Do not disclose information about a student or member of staff to a third party without good, duly considered reason. The University takes protecting personal data relating to its students and employees very seriously. However, there are some circumstances in which disclosure will be appropriate.

These circumstances, and the procedures you must follow, are described in the following guidelines provided by the University's Record Management team :-

• guidance for requests about staff
• guidance for requests about students

Any request for information about IT use (e.g. access to home directories, login records etc) must be referred to the Head of Computing. Where it is at all possible that the request may be related to formal proceedings (e.g. requests from the Police), the investigative techniques described in Compromised Machine Investigation must be followed.

-- AlastairScobie - 24 Feb 2015