This guidance has been drawn together by HESA and its statutory customers and aims to provide more information about the effect of the Data Protection Act 1998 (DPA98), the Human Rights Act 1998 (HRA98) and the Freedom of Information Act 2000 (FOI 2000) (and comparable Scottish Legislation) on the processing of HESA Individualised Staff and Student Records. (Version 3: February 2007)
http://www.hesa.ac.uk/index.php/content/view/140/170/