Accessibility statement

Data Protection Legislation 

In the UK, the General Data Protection Regulation (GDPR) sits alongside a new Data Protection Act 2018 which, together, provide a single framework for thinking about data protection compliance. Both came into force in May 2018.

Data protection is a fast-evolving field, subject to developing case law as well as new and updated guidance from the Regulator, the Informtion Commissioner's Office. The University's Legal Service will synthesise this guidance and case law and use these pages to publish University specific guidance, policies, templates and checklists. 

Remember, if in any doubt get in touch with



Durham Burt, Data Protection Officer


The University of York is a registered fee payer under the Data Protection (Charges and Information) Regulations 2018. Our registration number is Z4855807. For further infomration see the Register of Fee Payers