Colleges and universities have to consider all aspects of their operations when seeking to ensure compliance with the Data Protection Act 1998 ("the Act"). These operations cover the institution's core teaching and administration functions, its research activity, but also extend to BCE activities.
BCE activities will often involve the collection and use of personal data. Accordingly, institutions must ensure that their policies, practices and procedures cover any processing which they undertake in the course of these activities. This paper can be accessed in pdf format here - Data Protection and Business and Community Engagement - BCE.