Accessibility statement

UK GDPR compliant privacy notices

Whenever the University of York gathers or receives personal or special category data, it must provide a privacy notice to the data subject. Please see ICO “How to write a privacy notice” guidance for more detailed information.  

In order to ensure a consistent style across the University, a template privacy notice has been produced. This can be found within a google drive folder, together with toolkits specific to mailing lists, use of photography and video, and research participants. This folder is accessible to staff and students of the University.

When using the templates, you must ensure that your notice explains: 

  1. why data is being gathered;
  2. what legal basis is being relied on to process data; 
  3. whether data will be shared with a third party (an organisation other than the University) and, if so, why. 

Information about determining the legal basis for processing is available. If you need additional guidance, please contact dataprotection@york.ac.uk for support.