The University of Wolverhampton is committed to protecting the privacy and confidentiality of everyone who uses Report and Support. Information shared through Report and Support is handled in accordance with UK data protection legislation and the University's Data Protection Policy.
Under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, individuals have the right to request access to personal information that the University holds about them. This is known as a Data Subject Access Request (DSAR).
If you make a report
If you submit a report through Report and Support, you have the right to request a copy of the personal information the University holds about you, including information you have provided as part of your report.
If a report has been made about someone
If another individual makes a Data Subject Access Request, they may be entitled to receive copies of their own personal data contained within records held by the University, including information contained within a Report and Support report where it relates to them.
The University will not normally disclose your name or other identifying information when responding to a Data Subject Access Request. However, there may be circumstances where, despite reasonable steps to protect your identity, the individual requesting their information may be able to infer or identify who made the report from the nature of the information provided or the circumstances described.
For example, where a report relates to a specific incident, event or interaction involving only a small number of people, it may be possible for the individual to recognise who provided the information, even where names and direct identifiers have been removed.
How the University manages requests
Every Data Subject Access Request is considered carefully on its own merits.
Before releasing any information, the University will consider:
- The rights and freedoms of everyone involved.
- Whether information relates to more than one individual (known as mixed personal data).
- Whether exemptions within data protection legislation apply.
- The University's duty to protect confidentiality wherever reasonably possible.
- Any safeguarding, legal or public interest considerations.
Where personal information relates to more than one person, the University will carefully balance the rights of all individuals before deciding what information can lawfully be disclosed.
Other records created during a case
Following a report, the University may create additional records as part of its assessment, safeguarding response, risk management, correspondence or decision-making processes.
Both the person making the report and, where applicable, the person who is the subject of the report may have rights to request access to their own personal information contained within these records. As with the original report, the University will carefully consider the rights of all individuals before disclosing any information and will take appropriate steps to protect confidentiality wherever the law permits.
Our commitment
The University recognises that many individuals report sensitive concerns in confidence. Wherever possible, we will protect the identity of those who raise concerns and will only disclose personal information where we are legally required or permitted to do so. We will always seek to balance our legal obligations with our commitment to safeguarding, confidentiality and the wellbeing of everyone involved.