University fundraising under scrutiny after data breach allegations

University fundraising is to be examined by the Information Commissioner after allegations emerged that the personal data of some alumni was being misused.

Elizabeth Denham has committed to look at evidence which allegedly shows UK universities belonging to the Russell Group sent former students’ data to firms for wealth screening before approaching them for donations. She said she would assess whether any rules had been broken and if institutions had failed to tell people their personal information would be shared.

Profiling individuals for a fundraising campaign is not illegal, but the law requires that people are informed of how their data is being used.

Denham said: “Personal data belongs to the individual and that means they have the right to make choices about how it is used. The law requires organisations to tell people what it’s going to be used for and who it’s going to be shared with - and that’s what people expect.

“We have been working with the Fundraising Regulator and talking to universities about their responsibilities around transparency and accountability as they prepare to comply with a new stronger data protection law coming into force in May next year.”

She added that the ICO had offered to help universities better comply with the rules by working with them on guidelines and codes of practice.

Tricia King, the vice president of the Council for Advancement and Support of Education, which works with universities on fundraising best practice, said UK universities raised more than £1bn last year in philanthropic income in support of education and research.

“This money supports many things including support for students from disadvantaged backgrounds to crucial life-changing research,” she said. “As an important part of the university community, it is very clear that many alumni are proud to support the work of their former institution and want to be contacted.“In our experience, universities take the privacy of their alumni and other philanthropists very seriously.”

A spokesman for the Russell Group said donations from former students were used for a wide range of purposes including bursaries and new academic facilities.

Responding to allegations published in the Daily Mail, he said: “All Russell Group universities in England and Wales are registered with the Fundraising Regulator and when there are changes in guidance on best practice they will follow these closely.

“Our members are hugely grateful for the ongoing commitment to higher education shown by so many Russell Group alumni and take their privacy very seriously.”