Compliance with the GDPR and the Data Protection Act lies with the data controller or joint-data controllers; that being the Science Foundation of Ireland (SFI) Centre for Research Training and/or the University of Limerick. The University of Limerick has a responsibility for ensuring compliance with the Legislation.
I understand that all SFI awardees are subject to compliance of GDPR regulations, and this is stated in SFI’s general grant terms and conditions.
The University of Limerick published Data Protection Policy sets out its commitment to protecting the privacy rights of individuals in accordance with the Legislation. The Policy is designed to assist University of Limerick employees in adhering to the University's Privacy Notices and the Data Protection Acts 1988 & 2018 and the EU General Data Protection Regulation, 2016/679 (GDPR). The University of Limerick Policy is available at www.ul.ie/dataprotection where UL state:
- The University of Limerick needs to process personal data in order to deliver our services and to comply with legal requirements.
- We process personal data relating to current and prospective students and staff, members of the public, suppliers and other stakeholders.
- We may also process personal data in the course of our research activity. The University acknowledges its responsibility to safeguard the personal data with which it is entrusted.
- We take care to handle all personal data securely, to process it only for the purposes for which it was collected and to retain it only for the period of time for which it is required. The Policy further states that:
- All functional areas that process personal data must maintain a personal data register, which must include details on personal data collected, held or processed.
- All such local personal data registers must be communicated to when updated by the functional area; •Upon request, these registers will be disclosed to the Office of the Data Protection Commissioner.
It is considered that the individuals concerned should engage with the Data Protection Unit of the University (dataprotection@ul.ie ).
