About the student record and survey data that we share with the Higher Education Authority (HEA) so they can perform their statutory functions under the Higher Education Authority Act, 1971.
The HEA has a statutory responsibility for the effective governance and regulation of the higher education system pursuant to the Higher Education Authority Act 1971 and subsequent amending legislation which has extended its remit to encompass Institutes of Technology and more recently Technological Universities. In order to discharge its functions effectively it must process certain categories of personal information. The relevant legislation in relation to the data processing that involves the work of the HEA are the following:
Forthcoming legislation to be enacted by government in 2022 which is relevant to data processing by the HEA:
Higher Education Authority Bill 2022
This notice sets out the basis on which any personal data collected from you, or from others, will be processed by the HEA. Please read the following carefully to understand HEA practices regarding your personal data and how the HEA will treat these data.
The HEA Data Protection Officer (“DPO”) may be contacted at dataprotection@hea.ie
The HEA does not, except in limited circumstances, collect data directly from individuals. It is collected by Higher Education Institutions (HEIs) and passed to the HEA so as that the HEA can process the data so as to perform its statutory functions under the 1971 Act. The HEA processes the following personal data:
At registration for the HEI you will be attending, you will give data to your Institution. That data forms the basis of the SRS dataset. The data collected for the SRS is set out in Schedule 1 of this notice.
In respect of this survey, you will be contacted approximately 9 months post-graduation by your Institution to fill out the survey. It is conducted on a voluntary basis, although not on the basis of consent; that is to say that while it is voluntary to partake in the Survey, the HEA does not rely upon Article 6(1)(a), but relies upon the fact the processing is necessary for the performance of a statutory function or Article 6(1)(e). The data collected are set out in Schedule 1 of this notice.
The EAS is conducted by the individual HEI on a voluntary basis. The objective of the EAS is to ask higher education new entrants to answer a set of access related questions as part of the normal registration procedure. Registration in the main occurs in institutions between August and late October each new academic year. The questions relate to students facing social and/or financial barriers to higher education. Like the Graduate Outcomes Survey, the HEA does not rely upon consent as the basis for operating the survey, but upon the necessity to carry out the survey for the performance of its statutory functions and reasons of substantial public interest. The details collected are set out in Schedule 1 of this notice.
During your studies, you will be invited to participate in StudentSurvey.ie (Irish Survey of Student Engagement) or PGR StudentSurvey.ie (Irish Survey of Student Engagement for Postgraduate Research Students). Some of your information will be sent by your higher education institution directly to the survey company to ensure that the survey is offered only to relevant target groups. Your information will be used to collect your responses to the survey and make further anonymous analysis of results possible, for example, by gender or full-time/ part-time. This anonymised information will be shared with the HEA; your responses will be treated confidentially, and no individual student will be identifiable in any reports or results generated as a result of this survey (and so the information is not ‘personal data’ for the purposes of the GDPR).
To fulfil its legislative obligations the Higher Education Authority (HEA) requires an evidence base. This evidence base is provided by gathering individual student level data from the Higher Education Institutions. The primary database maintained in this respect is the Student Records System (SRS). Other datasets maintained by the HEA include the Equal Access Survey (EAS) and the Graduate Outcomes Survey.
Currently data is required for the following purposes:
The primary purpose the HEA has for collecting data is for statistical analysis in furtherance of its statutory obligations and to inform funding and other decisions made by the HEA. The HEA via its portal system shares personal data relevant to a HEI, with that HEI. The HEA also shares personal data with the following Government departments and public bodies. The HEA ensures that there are data sharing agreements in place with organisation with which data is shared. The table below provides more information regarding what is shared and the reasons for sharing.
Third party name
Purposes for Sharing the data
Lawful Basis for Sharing
The Department of Education
The Department of Further
and Higher Education, Research, Innovation and Science
The HEA shares identifiable microdata with the Department of Education to allow for transitions rate analysis from 2nd level to 3rd level and to produce 3rd level demand projections. Data are also shared to allow for detailed geographic participation rate analysis and monitor access and outcomes for disadvantaged students.
The HEA shares disaggregated course level data with DFHERIS to inform policy and allow analysis of the third level education sector.
Data is shared with other Government Departments and agencies to allow them to carry out their statutory functions. The sharing is allowed under Section 266 of the Social Welfare Consolidation Act 2005 as set out in the Social Welfare (Consolidated Claims, Payments and Control) Regulations 2007 and as amended by Social Welfare (Consolidated Claims, Payments and Control) (Amendment) (No. 4) (Sharing of Information) Regulations 2015.
The Central Statistics Office
The HEA shares identifiable microdata with the CSO to analyse graduate outcomes and to measure the
effectiveness of the higher education system. HEA data is linked to other Government administrative datasets in the CSO.
Statistics Act 1993 and a memorandum of understanding dated 4th February 2015.
SUSI – part of the CDETB (City of
Dublin Education and Training Board)
The HEA matches SUSI grant application data to HEA student record data using PPSN to verify previous attendance at HEA-funded institutions. SUSI data may be used in the HEA to allow for analysis of outcomes for disadvantaged students.
The SUSI data sharing agreement has its lawful basis under section 28 of the Student Support Act 2011.
The Department of Social Protection
The HEA shares PPSN, name, address and date of birth data to verify PPSN data with Client Identity Services.
In accordance with Government policy, the PPS number is used as the unique identifier on HEA databases. This allows for a continuity of statistical analysis and allows databases to be maintained accurately as well ensuring that there are no duplicate records in the system. The PPS number obtained may be validated using the Department of Employment Affairs and Social Protection PPSN client identity service.
SOLAS
The HEA shares identifiable microdata with SOLAS to allow for transitions rate analysis from further education to higher education and to track progress and outcomes for FE entrants into HE.
The Department of Public Expenditure and Reform
The HEA shares disaggregated course level data with DPER to allow for detailed labour market analysis.
Data is shared with other Government Departments and agencies to allow them to carry out their statutory functions. The sharing is allowed under Section 266 of the Social Welfare Consolidation Act 2005 as set out in the Social Welfare (Consolidated Claims, Payments and Control) Regulations 2007 and as amended by Social Welfare (Consolidated Claims, Payments and
Control) (Amendment) (No. 4) (Sharing of Information) Regulations 2015.
External Contractors
The HEA, on occasion, contract external bodies to process microdata in order to fulfil statutory functions, e.g. geocoding of student address data.
Contracts are organised through the OGP and data processing agreements are in place where necessary.
Data Processors
The HEA shares certain personal data with other organisations acting as processors, subject to appropriate data processing agreements and due diligence.
Anonymised Sharing
The HEA also shares statistical data with other Government departments who may benefit from same. This data is not personal data within the definition of Regulation 2016/679. Such aggregated data is shared in a form where the data subject is not identifiable and is shared from the SRS, EAS and GO databases.
The time periods for which the HEA retain your information depends on the type of information and the purposes for which it is used. The HEA will keep your information for no longer than is required or permitted.
Student level data collected in the Student Records System and via the Graduate Outcomes Survey and the Equal Access Survey are required to fulfil the statutory functions of the HEA. Student level data, including PPSN, is required to verify eligibility under the free fees scheme and for SUSI grant eligibility. PPSN is also required to link HEA data to other administrative Government datasets both within the HEA and in the CSO. Longitudinal analysis of these linked datasets allows the HEA and the Department of Education to formulate more effective education policy, measure the societal value and impact of the education system, measure outcomes – including for disadvantaged cohorts, and direct investment appropriately. For these purposes, student level data will be retained by the HEA from return year 2004 data currently in the system for a period of forty years – the majority of the active labour market years for students/graduates. Please note that student level data is stored securely in the HEA and is only shared with authorised bodies specified in legislation and/or the student data collection notice presented to students at registration. The identity of students is never disclosed to unauthorised third parties.
For further details on the applicable retention periods, please contact the HEA Data Protection Officer at dataprotection@hea.ie
Not at present. Any processing which may take place outside the EU or EEA will only be carried out with all necessary safeguards and in accordance with the GDPR.
You have the following rights:
You may exercise any of the above rights by contacting the HEA Data Protection Officer at dataprotection@hea.ie
You may lodge a complaint with the Office of the Data Protection Commission in respect to our processing of your personal data. The website is www.dataprotection.ie
To ensure your privacy and to protect the integrity of your data, the HEA will require you to verify your identity with a photographic ID before releasing or correcting your information.
This notice may change each year. This notice is applicable to the 2022/2023 academic year. A revised notice will issue in the event of any future changes.
The HEA Data Protection Officer can be contacted by email at dataprotection@hea.ie
By phone: 01 2317100
Address: 3 Shelbourne Buildings, Shelbourne Road, Ballsbridge, Dublin 4.
More detail on the HEA’s data processing activities can be found via the Data Privacy Notice - https://hea.ie/about-us/data_protection/
List of data items the HEA collect or obtain from higher education institutions, 2022/2023 Academic Year
The data higher education institutions send to the HEA include, student records:
1 Note: this does not relate to SUSI grant data. The collection of data in the Student Grant/DES Grant field is pending and will commence when the forthcoming legislation, The Higher Education Authority Bill 2022, is enacted by government. This field should be included in the 2022/2023 SRS collection if the legislation is passed prior to this collection. Alternatively, it will be included in the 2023/2024 SRS collection.
The following Graduate Outcomes Survey data will be sent to the HEA:
HEA SRS data, Equal Access Survey data and Graduate Outcomes Survey data are linked in the HEA for analysis purposes via Student ID and/or PPSN.
A Data Privacy Impact Assessment updated for May 2022 relating to the Student Record System, Equal Access Survey and Graduate Outcomes Survey has been circulated to Data Protection Officers in the higher education institutions.