Data protection


UHI North Highland and The University of the Highlands and Islands UHI has educational and business requirements to maintain certain personal data about living individuals including employees, students and graduates and others as part of its legitimate activities as a college/university. The College and the University recognise that the correct and lawful treatment of personal data maintains confidence in the organisation and provides for successful operations. The College and the University are committed to a policy of protecting the rights and freedoms of individuals with respect to the processing of their personal data. The College is registered with the Information Commissioners Office. Our registration number is: Z5164870

How we use your information

If you have any questions or concerns regarding how your data is used or processed, please contact the college’s Data Controller:

Data Protection

North Highland College UHI Data Protection Policy

Privacy Notices


College Employees & Trade Creditors (Suppliers of Goods & Services) content

College Employees & Trade Creditors (Suppliers of Goods & Services)

College Employees & Trade Creditors (Suppliers of Goods & Services)

College Employees & Trade Creditors (Suppliers of Goods & Services)

From January 2019, the college is being asked by Audit Scotland to participate in the National Fraud Initiative (NFI).  This involves the sharing of our employees personal data and that of our trade creditors (suppliers of goods and services).

We will share our staff payroll data and details of payments made to all of our trade creditors via a secure government portal.

A Government body (the Cabinet Office) then compares our data to that of other publicly funded and some private sector organisations. Any data matches identified are investigated to verify that all payments made are legitimate.

The purpose of the exercise is to combat fraud where public money is concerned.  The legal basis for sharing/processing the data is “processing is necessary for the performance of a task carried out the public interest or in the exercise of official authority vested in the controller” Article 6 1(e) of the Data Protection Act 2018.

How your data will be processed by the Government is fully detailed in the link below.