Data Protection - Staff Handbook
2. Legal Liability
Under the Act the Information Commissioner has powers to issue an enforcement notice or an information notice where a data controller is found to be in contravention of any of the data protection principles (eg unauthorised processing and/or disclosure of data). Failure to comply with these notices is an offence under the Act.
It is essential therefore for individual members of University staff to take all reasonable steps to familiarise themselves with the requirements of the Act and to ensure that they comply with it. This Handbook provides the necessary information to do this and will be periodically augmented by training seminars as required. If necessary, the University will rely on a defence of due diligence, based on the information about the Act which is made available to its staff and students. This includes the Handbook and seminars run by the Data Protection Officer, as well as notices which may be sent to all members of staff and students concerning their general rights and duties under the Act.