Data Protection


Data Protection

Welcome to the data protection website, the new site for key information for all staff, students and researchers helping to ensure UCL policy and codes of practice with regard to data protection are implemented across all departments.

The EU - U.S. Privacy Shield is no longer valid

The European Court of Justice has invalidated the EU - U.S. Privacy Shield: Schrems II case, that allowed the transfer of personal data between the two regions, stating that personal data protection and its judicial protection in the U.S. is not in keeping with requirements of EU law.

This will affect any future contracts determining whether data can be transferred to a U.S. based company. UCL has produced a short guidance note based on the initial impact of this decision.  If you have any queries surrounding this issue after reading our guidelines, please contact the data protection office before doing so on: data-protection@ucl.ac.uk.

Impact of Covid-19

We understand this is a worrying time for UCL staff and students with many business processes changing as a result of the impact of Covid-19, which results in questions around how to protect personal data when working in a different manner.

We have produced two sets of guidance to answer the most frequently asked questions:

In addition, as we currently need to prioritise research related to Covid-19, researchers in other areas looking to register their research with data protection may find the following FAQs helpful:

Data protection legislation protects individuals personal data by setting standards for the processing of their information and requiring those processing personal data to comply with these  standards.

Contact Us

Data Protection and Freedom of Information Officer