¹û¶³Ó°Ôº

There are now fewer than 100 days before the General Data Protection Regulation (GDPR) comes into force across the EU.

¹û¶³Ó°Ôº has begun to prepare for the regulation.

What has ¹û¶³Ó°Ôº done on GDPR so far?

The ¹û¶³Ó°Ôº GDPR Preparedness Project was established in July 2017 and has been assessing ¹û¶³Ó°Ôº's readiness for GDPR. The project found that ¹û¶³Ó°Ôº, like a large number of Universities and businesses across the EU, is not currently compliant.

In January a programme was presented to the ¹û¶³Ó°Ôº Senior Management Team (SMT) to deliver the necessary changes to bring ¹û¶³Ó°Ôº into compliance, but also to plan a further two-year process of embedding data-sensitive cultural change within the university. This programme was unanimously supported by SMT and received full funding for its proposed work.

There are two phases to the programme: Investigation Phase (Jan 2018-Dec 2018) and Implementation Phase (Dec 2018-beyond). However there is overlap, and you will see some implementation in the first phase as we identify quick wins.

For more details about the programme please see the ¹û¶³Ó°Ôº GDPR Website.

What can you and your department do to prepare?

Open staff events are planned throughout the programme. These will be advertised and communicated throughout the programme. The next event is on Wednesday 21 February 2018, 2-3pm to be held at 26 Bedford Way LG 04 (¹û¶³Ó°Ôº Psychology). All are encouraged to attend.

Familiarise yourself with the GDPR

- Visit the ICO Website:

- Visit the EU GDPR website:

- Look out for GDPR in the media.

In your departments, start to think about your policies and processes

- Are you compliant with the current DPA (1998)?

- Do you process personal data? If so, why? And do you need to?

- Do you retain personal data?

- Do you need to retain personal data?

- Do you have any processes that have not been updated for some time and need reviewing?

Talk about GDPR with your staff

Support and advice - your first 'port of call' should always be the ¹û¶³Ó°Ôº GDPR website where you will find:

- ¹û¶³Ó°Ôº GDPR Programme information

- FAQs

- Updates to legislation

- Webinars

- Guidance

This page is updated regularly, so please continue to check it.

You may contact the programme using gdpr@ucl.ac.uk

Professor Graham Hart, Dean of ¹û¶³Ó°Ôº Faculty of Population Health Sciences and Chair of ¹û¶³Ó°Ôº GDPR Project Board