Privacy notices

If you have any questions, comments or if there is anything in particular that you would like to see covered, please email srs-compliance@ucl.ac.uk or l.minks@ucl.ac.uk.

What is a privacy notice?

There are seven key principles that lie at the heart of the GDPR; the first is Lawfulness, fairness and transparency. To comply with this principle, UCL must be clear, open and honest from the start about how we use the data that we collect. The privacy notices are designed to inform individuals about what personal data is gathered, how it is used, stored and retained.  

What do I need to know?

UCL have published a number of privacy notices including general, staff and student privacy notices that you can view online. If you collect data as part of your role, you should ensure that a link to the relevant privacy notice is provided at the point of collection. If you think that you are collecting or processing data in a way that is not covered by the relevant privacy notice, it may be necessary for a local notice to be produced.

As people become more aware of their rights as a data subject, it is possible that questions will be received about how their data is used. If you do get a query of this nature, you can direct the enquirer to the relevant privacy notice.