Higher education institutions must provide the HEA Student Data Collection notice to their students.

Articles 13 and 14 of the General Data Protection Regulation requires information to be provided, or made readily available, to data subjects so that they are informed in a transparent manner as to the purposes for which their data is to be processed. In order to satisfy this principle, the HEA supply text for use by HEIs.

The student data collection notice can be supplied to students in any of the following areas:

•Providing the text with the registration form and the HEI’s own data protection statement;

•Including the text on a website with the HEI’s own data protection information;

•Including the text in a student handbook or other reference source for students.

The collection notice is published each year for students commencing and resuming their studies in that calendar year. The data collected pursuant to that notice will then be shared with the HEA with the following years returns. In accordance with the principle of fair obtaining, the HEI should at all times ensure the correct and current Data Collection Notice is published and for the avoidance of doubt the notice below is relevant for the 2020/2021 academic year.



Our use of cookies

We use necessary cookies to make our site work. We'd also like to set optional analytics cookies to help us improve it. We won't set these optional cookies unless you enable them. Using this tool will set a cookie on your device to remember your preferences.

For more detailed information about the cookies we use, see our Privacy Policy page


Necessary cookies

Necessary cookies enable core functionality such as security, network management, and accessibility. You may disable these by changing your browser settings, but this may affect how the website functions.


Analytics cookies

We'd like to set Google Analytics cookies to help us to improve our website by collecting and reporting information on how you use it. The cookies collect information in a way that does not directly identify anyone.