This project is to continue the GDPR work last completed in 2018 and make the university GDPR compliant,  and as a result ensure this does not impact the reputation of the university nor cause financial damage.

In addition the increased amount of data in the student record systems is causing performance issue. Applying data retention processes will meet some of those goals.

Out of scope

Not all GDPR requirements will be addressed due to resource/budget constraints. The details will be identified during the priorities review 

More GDPR may be required  risk already highlights those with a lower priority that will not be addressed

Deliverables will remove single point of failure from SSP by turning them into  sustainable operation procedures. Others will also address some of the service performance issues caused by the increased amount of unnecessary data stored in the student records