Legal Services


UCL General Data Protection Regulation (GDPR)

These pages aim to help prepare UCL staff for GDPR which came into force across the EU on 25 May 2018.

This legislation introduces sweeping changes to the way in which personal data can be collected, used, retained and deleted; furthermore, it also significantly increases the penalties for non-compliance – 20million Euros / 4% of worldwide turnover. To meet the challenge of compliance posed by this new Regulation, UCL has established the UCL GDPR Preparedness Programme.

issuu Widget Placeholder2187058/61624913

Please download the

Introductory presentation

This is an introductory presentation for staff on UCLs preparations for the incoming GDPR.

MediaCentral Widget Placeholder- https://mediacentral.ucl.ac.uk/Player/96764984

Gavel and scales


Regulatory policies and their impact on UCL

Cogs graphic

UCL GDPR Preparedness Programme

Measuring UCL's progress to GDPR compliance


Guidance for departments

Guidance notices for UCL staff

The information contained on these pages is intended to provide guidance on the GDPR to UCL staff only. It does not constitute wider legal advice on how to interpret data protection legislation. Where doubt exists, please contact the GDPR Programme gdpr@ucl.ac.uk for further guidance.