IT Services are provided from two on-site LPS 1175 compliant data centres; and a number of ISO 27001 accredited cloud suppliers with specific data sharing agreements, data is located within the EU and model clause contracts are in place.
The infrastructure at Loughborough is protected by an appropriate number of security controls, is subject to regular penetration testing, and has achieved the UK government Cyber Essentials Plus certification.
Loughborough University’s use of Microsoft OneDrive and Office 365 Groups is backed by the Higher Education sector wide contract with Microsoft managed by Jisc. The current contract, dated 1st January 2018, has been revised for compliance with the Data Protection Act 1998 ("DPA") and, the General Data Protection Regulation (EU 2016/679) ("GDPR"). The contract includes appropriate EU Model Clauses and recognises Microsoft’s Privacy Shield and ISO 27001 certification.