Information about you:
How we use it and with whom we share it

For researchers

The information you provide will be used by the Outbreak Data Analysis Platform to respond to enquiries, and to facilitate access to the platform including creating the agreements and user accounts within our Trusted Research Environments required to access data stored in the platform.

We may share this information with the University of Edinburgh and Public Health Scotland as the operators of the ODAP Trusted Research Environments and with the Data Controllers or their representatives for datasets contained within the platform as may be required to facilitate your data access request.

We are using information about you because it is necessary for the performance of your contract with us, or because you have asked us to take specific steps before entering into a contract such as a data sharing agreement.

Automated decision making

We do not use profiling or automated decision-making processes. A human decision maker will always be involved before any decision is reached in relation to you.

Data sharing

In addition to the primary purposes, we are also legally obliged to share certain data with other public bodies such as HMRC and will do so where the law requires this; we will also generally comply with requests for specific information from other regulatory and law enforcement bodies where this is necessary and proportionate.

Your rights

You have the right to request access to, copies of and rectification or (in some cases) erasure of personal data held by the University and can request that we restrict processing or object to processing as well as (in some cases) the right to data portability (i.e. the right to ask us to put your data into a format that it can be transferred easily to a different organisation). If you wish to make use of one of these rights, please email your local contact.

If we have asked for your consent in order to process your personal data you can withdraw this consent in whole or part at any time. To withdraw consent, please email your local contact, who will explain the consequences of doing so in any particular case and initiate proceedings for withdrawing consent.

Further queries

If you have any questions, please contact

Data controller and contact details

For data collected under this privacy notice, the University of Edinburgh (the “University”) is the Data Controller (as that term is defined in the EU General Data Protection Regulation (Regulation (EU) 2016/679), registered with the Information Commissioner’s Office, Registration Number Z6426984.

The University’s Data Protection Officer can be contacted at:

Data Protection Officer Contact details Email: Address Street Governance and Strategic Planning University of Edinburgh Old College

City Edinburgh Post Code EH8 9YL Our data protection policy is on our website.

University data protection policy


If you are unhappy with the way we have processed your personal data you have the right to complain to the Information Commissioner’s Office (ICO), but we ask that you please raise the issue with our Data Protection Officer first.

For information about reporting a concern to the ICO see their website:

ICO guidance on reporting a data protection concern