Data protection in higher education training

It’s expected that the Data Protection and Digital Information Bill (the DPDI) will become law in 2024. It aims to streamline the efficiency of data processing for public authorities through the reduction of administration and red tape.

Although the bill proposes some significant changes, it does not represent a radical departure from existing obligations. It will provide universities with greater flexibility over the use of personal data and reduce the burden of complying with UK data protection laws.

The Information Commissioner’s Office (ICO) is expected to continue to consult on various data protection issues and publish specific guidance to assist organisations in complying with their duties. In 2024, we can expect guidance to be issued on the development and use of generative AI models, the use of biometric data, the processing of employment records, and the journalism code of practice.

As individuals become more aware of their rights, the volume of subject access requests (SARs) will likely continue to increase. To stay ahead of the curve, universities will need to implement robust information governance systems or review their existing practices. This will enable organisations to manage rising volumes and increasingly complex information requests, avoiding the risk of a reprimand from the ICO.

As new technology, particularly artificial intelligence (AI) becomes more readily available, universities may find implementing new systems a solution to the problem of plugging their resource gaps.

While it undoubtedly has its benefits, taking a data-centric approach to implementing new technologies and having a clear understanding of the regulatory landscape will be key to the success of any new project. Understanding and building regulatory expectations into a project from the design phase is crucial in creating a culture of compliance and avoiding costly retro-fits.

With the rise in popularity of technology-based solutions comes the potential for data and cyber breaches.

Universities will need to prioritise preparing for such incidents. Establishing frameworks that emphasise preparedness through early detection and rapid response will be the key to managing the growing threats.