Every year we will send some of the information we hold about you to HESA (“your HESA information”). HESA collects, and is responsible for, the database in which your HESA information is stored. HESA uses this information in its own right, for example to publish statistics about students in higher education. HESA may link information we have provided to other related datasets such as UCAS, NSS, Individual Learner Record and Student Loan Company data (“linked data”). All uses of your HESA information and linked data must comply with the Data Protection Act 2018.
HESA is a registered charity and operates on a not-for-profit basis. It may charge other organisations to whom it provides services and information.
If you give us information about your disability status, ethnicity, these may be included in your HESA information and used to assist with monitoring equality of opportunity and eliminating unlawful discrimination in accordance with the Equality Act. Some other sensitive information is used to enable research into the provision of fair access to higher education, for example information as to whether you are a care leaver.
If you are enrolled at a higher education provider in England regulated by the Higher Education Funding Council for England your HESA information will include details of any financial support you may receive from us.
Your sensitive information will not be used to make decisions about you.
Your HESA information including linked data is used for four broad purposes:
Education statistics and data
Your HESA information is used by some organisations to help carry out public functions connected with education in the UK. These organisations are data controllers in common of your HESA information under the terms of the Data Protection Act. Such organisations may include:
and any successor bodies. These organisations may link your HESA information with other information they or other organisations hold. For example:
Linked data is used for research into education and its outcomes.
Your HESA information may also be used by some organisations to help carry out public functions that are not connected with education. Such uses may include the following:
Fraud detection and prevention – Your HESA information may be used to audit claims to public funding and student finance, and to detect and prevent fraud.
Your HESA information will not be used to make decisions about you other than for those uses outlined under Purpose 2.
HESA uses the HESA Student Record to produce statistical publications. These include some National Statistics publications and online management information services. HESA will take precautions to ensure that individuals are not identified from the data which are processed for Purpose 3.
HESA and the other data controllers listed under Purpose 1 may also supply data to third parties where there is a legitimate interest in doing so. Examples of use for this purpose include:
Users to whom data may be supplied for Purpose 4 include:
Information supplied by HESA to third parties is supplied under contracts which require that individuals shall not be identified from the supplied information. A copy of HESA’s current agreement for the supply of information is available at www.hesa.ac.uk/bds-details#e. HESA student information (linked to the National Pupil Database and/or Individual Learner Record held by DfE) may be supplied by HESA through DfE to researchers. A copy of the Agreement for the supply of linked data is available at www.gov.uk/government/collections/national-pupil-database
The HESA Student Collection Notice is regularly reviewed. The most up to date version can be found at www.hesa.ac.uk/fpn. Minor updates to the Student Collection Notice (including organisation name changes and clarification of previously specified purposes) may be made at any time. Major updates (such as a new purpose or administrative use) will be made no more than once per year.
Under the Data Protection Act 2018 you have rights of access to the data HESA holds about you. You will have to pay a small fee for this. For further information about data protection and your HESA information please see www.hesa.ac.uk/dataprot or email email@example.com
 Higher Education Statistics Agency Ltd is a company limited by guarantee, registered in England at 95 Promenade, Cheltenham, Glos, GL50 1HZ. Registered No. 2766993.
Registered Charity No. 1039709. Certified to ISO 9001 and ISO 27001. The members are Universities UK and GuildHE.