Consent for sensitive personal data processing
UWE Bristol's Student Support and Wellbeing Service (SSW) may need to request your permission to let us share your personal data in relation to Disabled Students' Allowance (DSA) funded Non-Medical Helper Support. This page explains sensitive personal data processing consent.
In addition to the normal data processing carried out by UWE Bristol ("the provider") the transfer of a copy of your DSA 2 letter, study work plan, or other relevant information contained within your student record, to the Disabled Students Allowance Quality Assurance Group (“the Auditor”) may be required so that the Auditor can audit the provider’s internal processes for dealing with the delivery of non-medical help support. These audits play an important part of ensuring that the provider is complying with all relevant legislation, internal and external guidance. Such compliance is vital to the provider, so it can properly assess the delivery of this support.
The information that the provider is proposing to transfer to the Auditor is a copy of your DSA2 letter, study work plan, or other relevant information contained within your student record. As you will be aware, this includes the following Personal Data about you:
- identity and age
- type of support awarded
- timesheets confirming delivery of support
- communications between you and the provider
- higher education institution and course information.
The provider is also proposing to transfer information which could be classified as sensitive personal data under the General Data Protection Regulations, including:
- the fact that you receive a disability allowance
- letter of award of support
- timesheets which indicate the type of support being delivered.
As the proposed transfer includes sensitive personal data (in this instance, health information about you), we require your consent before we are legally permitted to provide the Auditor with your sensitive personal data (but not other types of personal data), if selected as a student sample.
The personal data provided to the Auditor would only be processed for the specific purpose of carrying out the audit of the provider. The data would not be retained by the Auditor once the audit of the provider had been completed and accredited by DSA-QAG. This consent will be held by the provider for the duration of the audit process, alongside any other forms of consent you have provided to the provider in relation to other current data processing activities carried out by the provider in relation to your personal and sensitive personal data.
You are free to refuse to give your consent or to later withdraw your consent. Any refusal or withdrawal of consent will not affect any element of any service provided to you by the provider.