Home > Staff and students > Services and divisions > Legal Team > Data protection > Data Protection information for the general public


Data Protection information for the general public

How LSE views and implements the data protection act

The Data Protection Act 1998 is the piece of information rights legislation that covers personal information. It says how we should keep, process or transfer information relating to or identifying individuals. Any requests for information held about you are made under this Act.

Under the Act, the School as a data user is responsible for the personal data held and used by its members for business and professional purposes. 

It is required to ensure:

  • that it provides an annual notification to the Office of the Information Commissioner of the general purposes for which it processes personal data;
  • that all personal data are held and processed in accordance with the eight Data Protection principles set out in the legislation.

The eight  Data Protection principles are that:

  • personal data shall be processed fairly and lawfully;
  • personal data shall be obtained and processed only for one or more specified and lawful purposes;
  • personal data shall be adequate, relevant and not excessive;
  • personal data shall be accurate, and where necessary, kept up-to-date;
  • personal data shall not be kept for longer than is necessary;
  • personal data shall be processed in accordance with the rights of data subjects;
  • appropriate measures shall be taken against unauthorised or unlawful processing of personal data and against accidental loss or destruction of, or damage to, personal data;
  • personal data shall not be transferred to a country or territory outside the EEA, unless adequate data protection rights are ensured.

The School's Data Protection Officer|, keeps the records of the School's notification under the Data Protection Act (DPA). 

Rights to personal information under the data protection act

If you think the School holds information on you, you can make a request|  for your own information (called a subject access request) or to have information about you updated or corrected.