4. College Personnel's General Obligations
4.1. All College Personnel must comply with this policy.
4.2. College Personnel must ensure that they keep confidential all Personal Data that they collect, store, use and come into contact with during the performance of their duties.
4.3 College Personnel must not release or disclose any Personal Data:
4.3.1. outside the College; or
4.3.2. inside the college to College Personnel not authorised to access the Personal Data,
without specific authorisation from their manager or the Data Protection Officer; this includes by phone calls or in emails.
4.4. College Personnel must take all steps to ensure there is no unauthorised access to Personal Data whether by other College Personnel who are not authorised to see such Personal Data or by people outside the College.