Information Governance
For all Information Governance matters and guidance, visit the University of Manchester Information Governance Office pages.
Reporting data breaches
Did you know it’s your responsibility as an employee of the University to report all data breaches as soon as you become aware of one?
Under the General Data Protection Regulation (GDPR) we are obliged to report data breaches within 72 hours of becoming aware. The clock starts from the moment we know something has occurred. For example, this could be someone telling their line manager about an email sent containing sensitive personal data to an incorrect recipient.
What do I need to do?
As soon as you are aware of an incident involving person identifying information (PII), or if you’re unsure about whether you need to report an incident, you should call the Information Governance Office (IGO) on 0161 275 7789 or email infosec@listserv.manchester.ac.uk in line with the incident reporting procedure.
This is so they can assess whether it needs to be reported to the Information Commission Office on behalf of the University within the 72-hour deadline. If the University does not meet this deadline it could face a six-figure fine.
More information on reporting data protection incidents can be found on the Information Governance Office website
Guidelines
To keep information safe whilst working remotely please follow these guidelines
- Continue to follow UoM policies, procedures and guidance
- Only use approved technology for handling personal data
- Consider confidentiality when holding conversations or using a screen
- Take care with print outs/hard copy documents
- Don’t mix your UoM data with your own personal data
- Be extra vigilant about opening web links and attachments in emails or other messages (report anything suspicious to phishing@manchester.ac.uk)
- Lock screens when unattended (for those with children/housemates!)
- Use strong passwords #threerandomwords (change default wifi admin passwords)
- Communicate securely (e.g. use approved software/tools and password protect documents)
- Keep software up to date