Data Protection Legislation 

General Data Protection Regulation and Data Protection Bill 

The General Data Protection Regulation (GDPR) comes into force on 25 May 2018 and will replace the UK's Data Protection Act, 1998.

The University is currently in the process of preparing for GDPR implementation and will use this site to publish guidance, procedure and policy to assist colleagues in GDPR preparations.

In addition, the UK will be subject to a separate Data Protection Bill that will legislate on areas outside of the GDPR as well as those aspects of the Regulation where member states are required to implement their own law. 

The Data Protection Bill has just been passed and will come into force on 25 May 2018