Third party enquiries

A third party is any person or organisation other than the data subject or data controller. This includes parents, family members and friends. Personal data should not be disclosed to any third party without the consent of the data subject or unless a condition or exemption within the Data Protection Act applies.

If representatives of any of the following types of organisation contact you asking for personal information of current or past members of the University, but do not have the written consent of the individual concerned, please put them in touch with the Information Rights Officer at

  • police;
  • debt collectors;
  • insurance investigators;
  • landlords;
  • solicitors;
  • anyone claiming to be connected with counter-terrorism;
  • anyone claiming to be connected with immigration, nationality investigation or asylum;
  • the Home Office;
  • the MOD;
  • other security forces.

It is important to follow proper procedures to ensure the enquiry is genuine. Professional and legitimate enquirers are usually polite and should not object to following formal procedures.