The OfS needs to collect and process personal data about people, including staff and individuals with whom it deals, to operate its daily business, exercise its responsibilities and duties of care as an employer, and to fulfil its statutory functions and duties.
In doing so the OfS must comply with Data Protection legislation and give regard to associated guidance and codes of practice. Legislation requires the OfS to protect personal information and to control how it is used in accordance with the legal rights of individuals ('data subjects').
The OfS is fully committed to ensuring that personal information is collected and handled fairly, lawfully and in a transparent manner that also respects the rights of individuals. We recognise that being open and transparent with individuals about how we may use their information is a fundamental part of fulfilling that commitment.
As an employer, the OfS undertakes to provide training for staff who handle personal data so that they can act confidently, consistently and in accordance with relevant legislation.