Legal compliance

Data Protection Act 2018 and General Data Protection Regulation (GDPR)

UCL is required by law to comply with data protection legislation - Data Protection Act (DPA 2018) and General Data Protection Regulation (GDPR). It is committed to ensure that every member of staff and registered student protects personal data by making sure that they process it lawfully, fairly and transparently. This requirement extends to all of our suppliers by law.

Bribery Act 2010

We take a zero-tolerance approach to bribery and corruption and are committed to acting professionally, fairly and with integrity in all our relationships and business dealings wherever we operate and to implementing and enforcing effective systems to counter bribery. We will uphold all laws relevant to countering bribery and corruption. We remain bound by the laws of the UK, including the Bribery Act 2010, in respect of our conduct both at home and abroad. Pursuant to the Bribery Act 2010, UCL and/or its staff may be rendered liable to prosecution if there is evidence pertaining to the receiving or offering of bribes or inducements. This extends to our suppliers and any attempts to bribe or offer inducements.

Modern Slavery Act 2015

Through our world-class research and teaching and external engagement, and the way we operate as an institution, our community of staff and students is playing a leading role in responding to the challenges set out in the UN Sustainable Development Goals. We’re asking all of our suppliers to join us in tackling issues of exploitation and modern slavery. In accordance with the Modern Slavery Act 2015, section 54 we publish an annual Modern Day Slavery statement via our website stating our aims and achievements towards target set to ensure that slavery and human trafficking is not happening in any of our supply chains, in any part of our business.

We also publish information about our structure, policies in relation to slavery and human trafficking and the processes we have in place to monitor our supply chains. We require all our suppliers to provide details as to the steps taken to ensure that slavery and human trafficking are not happening in their supply chains either. Certain types of goods and services are identified as high risk for slavery and human trafficking and so we will conduct a proportionate assessment when buying these types of activities or goods.

Reporting modern slavery - Slavery may be closer to you than you think. There could be victims of exploitation working near you. If you suspect modern slavery, report it to the Modern Slavery Helpline on 08000 121 700 or the police on 101. In an emergency, always call 999.

Equality Act 2010

The Equality Act 2010  legally protects people from discrimination in the workplace and in wider society. Check Equality@UCL for information on the legal aspects of equality that UCL abides by, as well as our vision, future plans and answers to your questions.

Other legislation, where applicable

• Human Tissue Act 2004
• Export control laws - such as Export Control Act 2002 and Export Control Order 2008
• Sanctions and Money Laundering law - such as Proceeds of Crime Act 2002, Sanctions and Anti-Money Laundering Act 2018 and Money Laundering and Terrorist Financing Regulations 2019

UCL is subject to some legislation due to the nature of its business, and suppliers are expected to assist and facilitate UCL in its compliance obligations, including pursuant to:

Freedom of Information Act 2000

As a public body we are included in the remit of the Freedom of Information Act 2000 (FOIA). This means all of the information that University College London holds about your company is covered by FOIA, as is any information that you hold on our behalf. If you give us information on your products or services (e.g. In response to a competitive sourcing exercise) this will be subject to the FOIA but that does not mean it will automatically be released if it is requested, as one of the exemptions may apply. We will seek your views before making a decision on disclosure of information that might affect your rights or interests. Find out more about FOIA at UCL.

Environmental Information Regulations 2004

The Environmental Information Regulations 2004 provide public access to environmental information held by public authorities. The Regulations do this in two ways: (1) public authorities must make environmental information available proactively; and (2) members of the public are entitled to request environmental information from public authorities. The Regulations cover any recorded information held by public authorities in England, Wales and Northern Ireland. Environmental information held by Scottish public authorities is covered by the Environmental Information (Scotland) Regulations 2004. For more info, refer to the guide from the Information Commissioner's Office (ICO). 

Public Sector Bodies (Websites and Mobile Applications) Accessibility Regulations 2018

The accessibility regulations came into force for public sector bodies on 23 September 2018 - Public Sector Bodies (Websites and Mobile Applications) (No. 2) Accessibility Regulations 2018. They say you must make your website or mobile app more accessible by making it ‘perceivable, operable, understandable and robust’. You need to include and update an accessibility statement on your website. The accessibility regulations build on public bodies' existing obligations to people who have a disability under the Equality Act 2010 (or the Disability Discrimination Act 1995 in Northern Ireland). See the guidance from gov.uk on understanding accessibility requirements for public sector bodies. Find out more about digital accessibility at UCL.