The General Data Protection Regulation (GDPR) becomes law on 25 May 2018, replacing the existing Data Protection Act.

GDPR is going to affect every part of the University. Everyone has a responsibility to determine how they will be affected by GDPR and the steps they need to take to ensure the University’s compliance.

For a quick guide, take a look at the ‘Getting Ready for the General Data Protection Regulation (GDPR)’ Information sheet.

As part of our compliance effort, we have prepared a GDPR podcast briefing, which is mandatory for all staff to watch. This podcast outlines everyone’s responsibilities with respect to looking after personal data. It is also mandatory under GDPR that organisations engage in training and awareness-raising of data protection among their staff. The link will take you to a log-in screen hosted by our external processor, to generate a record that you have successfully received and accessed the link. Your email address and work area will be logged in order for the University to comply with its legal obligation to make staff aware of GDPR. Reports from this log, in order to monitor who has watched the podcast, will be accessible to senior line managers in order for them to ensure that all staff have accessed it.

Further information can be found on the GDPR Workspace Page and by contacting the Data Protection Team on data-protection@nottingham.ac.uk.

Face-to-face training is also available: ‘An Introduction to GDPR’ training sessions are available now through Central Short Courses.

Further communications will come out through April and May to assist colleagues in preparing for GDPR, so look out for those.