Data Protection Legislation 

General Data Protection Regulation and Data Protection Act 2018

The General Data Protection Regulation (GDPR) came into force on 25 May 2018.

In the UK, the GDPR sits alongside a new Data Protection Act 2018 which, together, provide a single framework for thinking about data protection compliance. 

Data protection is a fast-evolving field, subject to developing case law as well as new and updated guidance from the Regulator. The University's Records Management and Information Governance Office will synthesise this guidance and case law and use these pages to publish University specific guidance, policies, templates and checklists. 

Remember, if in any doubt get in touch with dataprotection@york.ac.uk