The on-line registration system was introduced as part of the union’s plan to outsource the management of its student databases. The union aimed to increase its income by sending targeted e-mails and text messages to registered students. The information collected on the web site was also to be used for issuing union membership cards.
The web site, without posting a data protection notice or privacy policy, asked students to disclose information such as their address, mobile phone number, but also sensitive data such as disabilities and religious beliefs.
According to Computer Weekly, Students and staff accused the union of breaching the 1998 privacy law and claimed that the web site was asking for more information than is necessary for registration purposes. They also claimed that it was not clear whether the union would disclose sensitive data to third parties.
Bath University has asked the union to take down the web site.