An organisation has recently been prosecuted for failing to notify the ICO that it processed personal data. Failure to notify is a criminal offence under the Data Protection Act 1998 and the successful prosecution in this case led to a conditional discharge and £614 to be paid towards the prosecutor’s costs. Although it is unlikely that colleges and universities have failed to notify the ICO, it may be worth checking that your notification is up to date and reflects the activities taking place.
The news story is available on the ICO website together with links to the register of data controllers.
JISC Legal also provides free guidance for colleges and universities on Data Protection.