Data Protection Policy

The University of London is a registered data controller and subject to the requirements of the Data Protection Act 1998. The University has a data protection policy which can be accessed below.

The ‘Subject Access Right’ requires the University to supply data subjects with information about the data which they hold on them (including copies of the data) if requested to do so. The application form for making a subject access request is available below. The University charges £10 for this service.

The General Data Protection Regulation
The General Data Protection Regulation (GDPR) is a new data protection law which comes into force in May 2018. The University will be updating this page and its data protection policy pages as the date approaches. There will be a number of new rights available to data subjects and changes to some procedures.  

Data Protection Policy  [PDF 11pgs, 204KB]
Dealing with requests for personal information  [PDF 2 pgs, 140KB]
Subject Access Request Application Form  [PDF 3pgs, 85KB]
Data Protection online course for staff


Data Protection Officer
Legal Services
University of London
Senate House
Malet Street
London  WC1E 7HU

Email:  for further information and advice.

Contact Us

University of London
Senate House
Malet Street


+44 (0)20 7862 8000

Ask a question


Colleges and Institutes of the University of London