)
About this notice
The University of East Anglia processes personal data to fulfil statutory information requests; including those submitted under the Freedom of Information Act 2000 (FOIA) and the Environmental Information Regulations 2004 (EIR).
Types of data collected
Any types of data, including personal data, already held by the University may be processed whilst collating a response to a statutory information request.
To process requests the University will also process: names and contact details of requesters.
Lawful basis for using your data
Data protection processing activities are undertaken to fulfil our legal obligations as set out in the Freedom of Information Act 2000 (FOIA) and the Environmental Information Regulations 2004 (EIR).
How long we keep your data
We will store personal data only as long as is necessary to fulfil our purposes. The length of retention is determined by the nature of processing, and is documented in our Retention Schedule.
Data processing
The University will securely store your personal data on our local IT servers and within locked filing systems. We may contact you via email; the University uses the Microsoft Corporation as our email provider.
The University will not transfer your personal data outside of the United Kingdom.
The University will not undertake automated decision-making or profiling with your data.
The University will not share personal data to any third party unless a lawful basis exists or where we are required to do so by law.
Further information
For more information about the processing of personal data by the University, you can contact our Data Protection Officer by emailing dataprotection@UEA.ac.uk
Changes to this notice
This privacy notice was last updated on 07 November 2025.