Institute of Epidemiology & Health Care


General Data Protection Regulation (GDPR)

UCL's Institute of Epidemiology and Health Care aims to conduct research to the highest standards of research integrity. Our research is underpinned by policies and procedures that ensure we comply with regulations and legislation that govern the conduct of research; this includes data protection legislation such as the General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018 (DPA).

As a University, we use personally-identifiable information to conduct research to improve health, care and services As a publicly-funded organisation, we have to ensure that it is in the public interest when  we use personally-identifiable information from people who have agreed to take part in research.  This means that when you agree to take part in a research study, we will use your data in the ways needed to conduct and analyse the research study.

Your rights to access, change or move your information are limited, as we need to manage your information in specific ways in order for the research to be reliable and accurate. If you withdraw from the study, we will keep the information about you that we have already obtained. To safeguard your rights, we will use the minimum personally-identifiable information possible.

Further information: