Data Protection Policy for London College for Professionals (LCFP)

Policy Statement: London College for Professionals (LCFP) is committed to respecting and protecting the privacy and security of the personal data of its students, staff, and other members of the college community. This Data Protection Policy outlines the principles and procedures LCFP adheres to in order to ensure compliance with applicable data protection laws and regulations, including the General Data Protection Regulation (GDPR).

Scope: This policy applies to all personal data processed by LCFP, regardless of whether the data is held electronically or in a physical format. It pertains to personal data collected about students, staff, visitors, and other individuals associated with the college.

Objectives:

• To ensure LCFP processes personal data lawfully, fairly, and transparently.
• To collect personal data for specified, explicit, and legitimate purposes and not process it in a manner that is incompatible with those purposes.
• To ensure the personal data collected is adequate, relevant, and limited to what is necessary in relation to the purposes for which it is processed.
• To ensure personal data is accurate and, where necessary, kept up to date.
• To keep personal data in a form that permits identification of data subjects for no longer than is necessary for the purposes for which the personal data is processed.
• To process personal data in a manner that ensures its security.

Data Protection Principles: LCFP adheres to the following data protection principles:

1. Lawfulness, Fairness, and Transparency: Data is processed legally, fairly, and transparently, with the informed consent of the data subject where required.
2. Purpose Limitation: Data is collected for specific, explicit, and legitimate purposes and not further processed in a way incompatible with those purposes.
3. Data Minimization: Only data that is necessary for the purposes of processing is collected and processed.
4. Accuracy: Every reasonable step is taken to ensure that personal data that is inaccurate is erased or rectified without delay.
5. Storage Limitation: Personal data is kept in a form which permits identification of data subjects for no longer than necessary.
6. Integrity and Confidentiality: Personal data is processed in a manner that ensures its security, including protection against unauthorized or unlawful processing and against accidental loss, destruction, or damage.

Rights of Data Subjects: Data subjects have the right to:

• Access their personal data.
• Have inaccuracies corrected.
• Have information erased.
• Prevent direct marketing.
• Prevent automated decision-making and profiling.
• Data portability.

Responsibilities:

• The Data Protection Officer (DPO) is responsible for advising on and monitoring compliance with this policy and data protection laws.
• All staff are responsible for ensuring that any personal data they handle is processed in accordance with this policy and data protection principles.

Data Security: LCFP implements appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including protection against unauthorized or unlawful processing and against accidental loss, destruction, or damage.

Breach Notification: Any data breach likely to result in a risk to the rights and freedoms of individuals must be reported to the appropriate authorities within 72 hours of the college becoming aware of it.

Training and Awareness: LCFP will provide training to all staff members who handle personal data to ensure awareness of their obligations under data protection laws and this policy.

Policy Review and Updates: This policy will be reviewed regularly and updated as necessary to reflect best practices and legal requirements. Amendments to this policy will be communicated to all staff and relevant parties.

Effective Date: 14/04/2024

This policy ensures that LCFP meets its legal, ethical, and practical responsibilities in relation to data protection and privacy.