Data protection: an introduction Data protection: an introduction

The Data Protection Act 2018 and the General Data Protection Regulation (GDPR) give the University responsibilities in relation to how we handle personal information. Those who collect and use personal data on behalf of UEA must follow the data protection principles found in the GDPR.

The law also gives people certain rights. For information on how we use personal data, see our privacy notices. Your Rights explains how the law helps you to protect your privacy.

As a data controller, the University is registered with the Information Commissioner. Our registration number is Z8964916 and we are listed here.

UEA data protection contacts UEA data protection contacts

If you have questions about data protection at UEA, contact our Information Compliance team at or by telephone on +44 (0)1603 59 2431/1143/7709.

The University's Data Protection Officer is Ellen Paterson. You can reach Ellen using the email address and phone number above (ext.2431).

The University also has a network of data protection contacts, covering all departments and Schools. If you're a member of UEA staff and don't know who your contact is, email

UEA data protection policies UEA data protection policies

The Data Protection Policy sets out how personal data will be managed by the University, and explains responsibilities.

The following University policies also contain statements and requirements on how we process personal data, and include actions for all staff.

Information Classification and Data Management Policy

Conditions of Computer Use

General Information Security Policy

Records Management Policy

GDPR training module GDPR training module

UEA staff and students can access online data protection training. Go to Blackboard and you'll find a link under 'My Organisations'.

All staff must complete this online training (or an approved alternative) each year. Training is monitored and reports shared with managers on a regular basis. 

Find out more Find out more

We offer regular lunchtime Q&A sessions to answer data protection queries from staff or students.

No booking is required, you can drop in any time.

Time: 12-1pm

Location: Library, room 1.24


To be announced in January

Let us know if these times don't suit, or if you'd like the team to run a data protection session for your department.