Confidentiality and Disclosure

DASS and confidentiality

All students who decide to register with DASS for support are asked to sign a release of information form.  This allows them to control the information that we pass on to other people.  They are advised that if a student limits disclosure too much, it can be difficult for the University to make adjustments in work.

If you can see information on Qlikview then you know that the student has given permission to circulate that information to staff who need to know to implement the support. Sometimes students restrict disclosure to particular members of staff, and in these circumstances you will receive a support plan via email with instructions on how it can be circulated. 

Student confidentiality statement

To read DASS's Confidentiality Policy visit:

• Confidentiality Policy (pdf) 

Data Protection

The disability data that you have access to as a DC is classified as sensitive personal data.  As such, you have a responsibility to ensure that this data is kept safe and protected. All DCs need to successfully complete online data protection and protecting information courses before they can start in the role.  They should pass confirmation that this has been done to the DASS Database Administrator, Imtiyaz Timol (Imtiyaz.timol@manchester.ac.uk). 

The following basic principles should be followed: 

• Under NO CIRCUMSTANCES should local databases / spread-sheets be retained and, if produced, they should be used minimally, password protected and then destroyed.

• Emails containing sensitive information should not be routinely copied or forwarded unnecessarily. Student’s registration numbers (and not names) should be used in emails. 

• All documents should be encrypted in accordance with the University’s guidelines. 

• Hard copies of materials containing this information should be retained in line with the University retention schedule or shredded. 

• Information should only be shared with those who have a legitimate reason to know in the course of their work. If sensitive disability data is accidentally made known to unauthorised persons you should contact the DASS immediately for advice. 

• To report a breach, please contact the Records Management Office on 58111 and email Elaine@manchester.ac.uk and infosec@listerv.manchester.ac.uk IMMEDIATELY a data breach is suspected or confirmed.  Out of office hours contact the Security Office (0161 306 9966) and ask them to contact the Emergency Incident Manager who will then contact the University Data Protection Officer).