1. I am asked to provide additional advice concerning questions arising in relation to the
impending coming-into-force of the General Data Protection Regulation (GDPR). In
particular, following my Advice of 9 March 2017, I am asked to set out in further detail
the basis for my view that universities may share the personal data of students with
student unions lawfully in reliance of Article 6(1)(c) GDPR and s22 Education Act
Please download the PDF for more information.