Information Services Division


Data Protection

Research studies at UCL are required to register with the UCL Data Protection Office if they intend to process personal data. The registration requires users to provide details about their studies which are useful also for our records. Template consent forms are reviewed in this process so when the study is registered, the Data Protection Office will return a set of email attachments and a registration number. This folder on SharePoint is there to keep copies of the email attachments which will often include at least one template consent form and a participant information sheet. For Data Protection purposes these documents show that a legal basis for processing personal data on UCL services exists.

There are cases where the legal basis for processing personal data comes from Section 251 of the NHS Act 2006. For Data Protection purposes, the documents that need to be stored in these instances are a CAG approval notice which indicates that Section 251 support has been obtained.