February 2017

USG002 D&A - Compliance with PECR, Etherington & Data Protection Regulation

Compliance

Planning: Apr 2017

Delivery: TBC in 16/17 and 17/18

RAG Status

AMBER

Plan

This project is to comply with three separate strands of regulatory changes:

• The Privacy and Electronic Communications Regulations (PECR)
• The Etherington review of how charities are regulated
• The draft EU Data Protection Regulation

The above is core-funded work. In addition there will be sponsor-funded work to migrate to the web based version of thankQ as estimated in USG001.

This is AMBER as the project has not yet started, and therefore it is not clear whether the requirements and associated work will be able to be delivered within the current estimate and timescale. The project work is currently split 50d in 16/17, and 20d in 17/18, with additional sponsor-funded days for the thankQ web migration to be determined. The updates must be fully operational before May 2018 to enable the University to be compliant.

USG Application, Infrastructure & Database End of Life Compliance

Compliance

Planning: Apr 2017

Delivery: TBC in 16/17

RAG Status

AMBER

Plan

This project is to identify applications, databases and infrastructure which will come to the end of their working life in the next 3 years, and to plan upgrades, migrations or replacements accordingly.

The status is AMBER as it is not yet clear what must be delivered in 16/17, although the current expectation is that this will be small, and significantly smaller than the allocated budget. Initial expectations are that most of the compliance changes for 16/17 have been delivered as part of STU251, with only a potential apache tomcat upgrade for the International Office global showcase to be planned in this year. The analysis of those changes to be implemented for 17/18 may be able to be started within this project.