Compliance Domain

The Compliance domain covers the policies and frameworks that ensure NCI meets its statutory, regulatory, and contractual obligations across academic and institutional operations. 

It supports a culture of integrity, transparency, and accountability by embedding compliance requirements into institutional practices and systems. 

Policies in this domain provide the governance infrastructure for legal compliance, information governance, data protection, and institutional risk management. They also ensure that learners and staff operate in a safe, secure, and lawful environment.

Policies

Core Data Protection & Privacy

• Data Protection Policy
• Privacy Statement Policy
• NCI Staff Data Processing Notice
• Staff Covid Privacy Statement
• Data Protection by Design and Default Policy
• Data Protection Impact Assessment Threshold Policy
• Data Subject Rights Procedure
• Personal Data Risk Classification Scheme
• Guidance on Third Party Requests for Personal Data
• Covert Recording Policy
• Student Terms of Use

Data Breach & Incident Handling

• Personal Data Breach Handling Procedure
• Data Breach Incident Procedure
• Critical Incident Policy

Records & Retention

• What is a record?
• What is Records Management?
• Legal Records Retention Schedule
• Payroll Records Retention Schedule
• HR Records Retention Schedule
• Finance Records Retention Schedule
• Student Records Retention Schedule
• Governance and Company Records Retention Schedule

Information & Data Governance

• Data Governance Classification and Handling Policy
• User Security Policy
• Operations Security Policy
• Change Management Policy
• Portable Storage Device Policy
• Bring Your Own Device Policy
• Vendor Risk Management Policy
• NCI Third Party Security Policy

Training, Guidance & Tips

• Data Protection Training
• Guide to GDPR Terminology
• Tips – GDPR and Video Conferencing
• Tips – GDPR and Working from Home
• Information on Phishing
• Instructions on How to Recall Emails in Outlook

HR / Staff Related Compliance

• Joiners Movers Leavers Procedure
• NCI Employee Media and Social Media Policy

Legacy QAES Content

The chapters below are from the 2019 QA Handbook and remain in effect until they are formally reviewed and replaced. They have been moved into our standard template so they are consistent and easier to read. The content is unchanged.

A substantial number of standalone policies, procedures and operational documents now govern areas previously covered in these chapters, and a full cross-referencing and mapping exercise is underway. Until that is complete, both chapters remain active in full and should be read alongside the relevant published policies listed above.

• Chapter 9: Information Governance and Compliance
• Chapter 10: Public Information