UCL News


Data Protection Legislation (GDPR and Data Protection Act 2018) Update

18 July 2018

Since the Data Protection Legislation was passed on 25th May 2018, the GDPR Preparedness Programme and the Data Protection Officer have been busy publishing privacy notices and guidance notes.

GDP EU FLAG They have recently produced the following:

- Updated guidance on writing local privacy policies

- Guidance for researchers: implications of GDPR and DPA 2018

- Research with children: guidance on data protection issues

- Using 'legitimate interests' as a lawful basis for processing personal data

- Guidance on using out of office

- Updated Data Privacy Impact Assessments (DPIAs) (general, staff and research)

- And linked a new privacy notice for participants in health and care research

We are developing a new and reinvigorated network of 'information compliance custodians' that will help coordinate departmental efforts to comply with data protection and other related legislation such as FOI. We will be holding workshops over the next few months to keep custodians informed and up to date with the legislation, and present some ideas about how the role can be developed. It is also an opportunity for custodians to ask any questions they may have and have a say in how UCL should meet the challenge of complying with the new legislation more generally. If you are interested in knowing more about the network or would like to nominate a person from your department please contact l.bevan@ucl.ac.uk

Please visit www.ucl.ac.uk/gdpr for regular updates and a wealth of useful information. If you have any questions, contact the team at GDPR@ucl.ac.uk.