Skip to main content

HESA and Jisc - data protection

HESA data analytics services are now delivered by Jisc

As part of the integration, HESA and Jisc have agreed formal roles to govern the uses of HESA data. Jisc will now deliver HESA’s data analytics services.

Both organisations have set up Data Panels to oversee new and existing data releases and products. The data panels ensure that HESA data, which includes information relating to individuals is protected and only used in ways that they have been told about in the HESA collection notices.

There are different arrangements for the products and services previously provided by HESA. The organisation that makes decisions about how to use personal data is the ‘Controller’ in data protection legislation. The organisation that processes data on the Controller’s instructions is called a ‘Processor’.

The below sets out the data protection position for each of the products and services provided by Jisc, using HESA data.

Jisc’s data and analytics products and services

(links below lead to the Jisc website)

For Tailored Datasets and Heidi Plus, HESA is the Controller and Jisc is a Processor working on HESA’s behalf. This means HESA takes all decisions about whether and how data can be processed for these uses.

For Data Consultancy, Progress through HE Report, HE Impact: Local Level ReportWorkforce Explorer, and Analytics labs products, Jisc will be the Controller of the HESA data within these products. This means that the decisions regarding the use of the data within these products will sit with Jisc.

When you buy a data product your contract will identify who is the data controller, and any data protection obligations that you have to comply with.

If you are a data subject (i.e. your data might be included in a product) and you have questions about how we use your data, you should contact the Controller. HESA and/or Jisc can be contacted using the links below:

Contact HESA’s data protection officer: [email protected]  +44 (0)1242 388 513 [option 5]

Contact Jisc’s data protection officer: [email protected]