Data protection: an introduction Data protection: an introduction

On 25 May 2018 the UK's data protection law changed. The Data Protection Act 2018, and the General Data Protection Regulation (GDPR) are now in force. 

The new law gives the University obligations and responsibilities in the way it handles personal information. It enhances people's rights, and those who gather and use personal data on behalf of the University must follow the data protection principles.

For specific information on how the University uses personal data, see our privacy notices. Your Rights explains how the law helps you to protect your privacy. For further information, see our online training (for UEA staff and students) or come along to a drop-in session.

UEA data protection contacts UEA data protection contacts

If you have any specific queries about data protection at UEA, please contact the University's Information Compliance team at or by telephone on +44 (0)1603 59 2431/1143.

The University's Data Protection Officer is Ellen Paterson. You can reach Ellen using the email address and phone number above (ext.2431).

The University also has a network of data protection contacts, covering all departments and Schools. If you're a member of UEA staff and don't know who your contact is, email

UEA data protection policies UEA data protection policies

The Data Protection Policy sets out how personal data will be managed by the University, and explains responsibilities.

The following University policies also contain statements and requirements on how we process personal data, and include actions for all staff.

Information Classification and Data Management Policy

Conditions of Computer Use

General Information Security Policy

GDPR training module GDPR training module

If you are a member of UEA staff or student you can access online data protection training. Go to Blackboard and you'll find a link to the training under 'My Organisations'.

All staff will need to complete this online training (or an approved alternative) each year. Training will be monitored and reports shared with managers on a regular basis. 

Find out more Find out more

The Information Compliance team are running regular lunchtime Q&A sessions to answer data protection queries from staff or students.

No booking is required, you can drop in any time.

Time: 12-1pm

Location: Registry, Committee Room 3 (CR3)


07 Nov 2018

04 Dec 2018 (CR2)

15 Jan 2019

13 Feb 2019

06 Mar 2019

10 Apr 2019