The HESA Staff Record
Every year, we send some of the information we hold about you to the Higher Education Statistics Agency (HESA). HESA is the official source of data about UK universities and higher education colleges www.hesa.ac.uk. Your HESA information does not contain your name or contact details, but may contain your Open Researcher and Contributor ID number if you have one. If you leave your current employment and move to another higher education provider we may pass your HESA Staff ID number to your new employer to enable research into employment in the higher education sector.
It is not intended to use your HESA information to make decisions about you
HESA collects, and is responsible for, the database in which your HESA information is stored. HESA is a registered charity and operates on a not-for-profit basis. HESA uses your HESA information itself for its own purposes. HESA also shares information from your HESA information with third parties. It may charge other organisations to whom it provides services and data. All uses of the HESA Record must comply with the UK General Data Protection Regulation (GDPR) and the Data Protection Act 2018.
If you give us information about your disability status, ethnicity, sexual orientation, gender reassignment, parental leave or religion these may be included in the HESA information to assist with monitoring equality of opportunity and eliminating unlawful discrimination in accordance with the Equality Act. Your sensitive information will not be used to make decisions about you.
Purposes for collecting the HESA Staff Record
Your HESA information is used for four broad purposes:
|Purpose 1 - Public functions|
Your HESA information is used by some organisations to help carry out public functions connected with education in the UK. These organisations are data controllers in common of your HESA information under the terms of the Data Protection Act (this link explains what this means ico.org.uk/for-organisations/guide-to-data-protection/key-definitions/). Such organisations may include:
and any successor bodies. Your HESA information may also be used by some organisations who are also data controllers in common to help carry out public functions that are not connected with education such as monitoring of public expenditure by the National Audit Office.HEFCE will link information about academic staff to Research Excellence Framework submissions in order to monitor equal opportunities in relation to that exercise.
|Purpose 2 - HESA publications|
HESA uses your HESA information to produce and publish information and statistics. This includes some National Statistics publications and online business intelligence and research services.
HESA will take precautions to ensure that individuals are not identified from any information which is processed for Purpose 3.
|Purpose 3 - Equal opportunity, research, journalism and other processing in which there is a legitimate interest|
HESA and the other data controllers in common listed under Purpose 1 may also supply information to third parties where there is a legitimate interest in doing so. Examples of use for this purpose include:
Users to whom information may be supplied for Purpose 3 include:
Information supplied by HESA to third parties within Purpose 4 is supplied under contracts which require that individuals shall not be identified from the supplied information. A copy of HESA’s current agreement for the supply of information is available at www.hesa.ac.uk/bds-details#e.
|Purpose 4 –Clinical academic staff and health professionals only|
If you work in a clinical or health-related role or department the following organisations may use your HESA information for the additional purposes described below:
The Medical Schools Council and Universities UK through the activities of its Dental Schools Council – for the purposes of:
About the HESA Staff Collection Notice
The HESA Staff Collection Notice is regularly reviewed. The most up to date version can be found at www.hesa.ac.uk/fpn. Minor updates to the Staff Collection Notice (including organisation name changes and clarification of previously specified purposes) may be made at any time. Major updates (such as a new purpose) will be made no more than once per year.
Under the UK General Data Protection Regulation and the Data Protection Act 2018, you have rights of access to the information HESA holds about you. For further information about data protection and the HESA Staff Record please see www.hesa.ac.uk/dataprot or email firstname.lastname@example.org.