1. I am asked to provide additional advice concerning questions arising in relation to the

impending coming-into-force of the General Data Protection Regulation (GDPR). In

particular, following my Advice of 9 March 2017, I am asked to set out in further detail

the basis for my view that universities may share the personal data of students with

student unions lawfully in reliance of Article 6(1)(c) GDPR and s22 Education Act

Please download the PDF for more information.