Skip to main content

Compliance and regulation

HESA is now part of Jisc. Jisc is now the data controller of personal data previously controlled by HESA. Pages on the HESA website are being updated to reflect this change. Please see updated Privacy information.

As a trusted statistics agency with a statutory function, we are committed to the highest standards of conduct.

Jisc is a not-for-profit private limited company (see About us on the Jisc website).

Data protection is pivotal in everything that we do. Our data protection pages include guidance for HE providers and privacy information for data subjects.

As a producer of Official Statistics, we comply with the Code of Practice for Statistics.

Data collection in higher education is about a relationship between those organisations that request data (the demand-side) and higher education providers that respond to these requests (the supply-side). The data collection Codes of practice define a model of consensual governance for these relationships that aims to balance the needs of data collectors and higher education providers.

HESA is not covered by the Freedom of Information Act 2000. However, we always do our best to answer any queries we receive about the data that we collect.

We take complaints about our services very seriously and try to address concerns swiftly and thoroughly.