Accessibility statement

Data Protection Legislation 

General Data Protection Regulation and Data Protection Act 2018

The General Data Protection Regulation (GDPR) came into force on 25 May 2018.

In the UK, the GDPR sits alongside a new Data Protection Act 2018 which, together, provide a single framework for thinking about data protection compliance. 

Data protection is a fast-evolving field, subject to developing case law as well as new and updated guidance from the Regulator. The University's Records Management and Information Governance Office will synthesise this guidance and case law and use these pages to publish University specific guidance, policies, templates and checklists. 

Remember, if in any doubt get in touch with



Durham Burt, Data Protection Officer


The University of York is a registered fee payer under the Data Protection (Charges and Information) Regulations 2018. Our registration number is Z4855807. For further infomration see the Register of Fee Payers