Data Controller

The Data Controller is the person(s) or organisation that determines the purposes and the manner in which personal data is processed. In our case the University of Salford is the Data Controller.

Data Processor

Any person (other than an employee of the University) who processes data on behalf of the University. For example contractors to the University

Data Subject

The Data Subject refers to the individual who is the subject of personal data.


Processing refers to any operation you carry out on the data; this may mean collecting, organising, deleting, extracting information or even just storing it.


Consent is any freely given permission to process data from the individual of whom the data concerns (data subject). There are two types of consent, implicit and explicit:

Implicit - Where consent is implied. For example, the data subject completes and returns a questionnaire.

Explicit - Where we would need the data subject's agreement to process his/her information in writing. This is especially important for sensitive personal data where explicit consent is vital to the processing of the data type.

Personal Data

Data which relates to a living individual which can be identified from the data and includes any expression of opinion about the individual and any indication of the intentions of the data controller in respect of the individual.

Sensitive personal data

Sensitive personal data is data that consists of information related to racial or ethnic origin, political opinions, religious beliefs, trade unions, physical or mental health, sexual life, convictions, proceedings and criminal acts (alleged or actual).