Data Protection

The University of London is a registered data controller and subject to the requirements of the General Data Protection Regulation (GDPR) and associated legislation.

Data Protection Policy

The University’s Data Protection Policy can be viewed here: 

Privacy Notices

The University has a wide range of functions and services. For more information please read our general privacy notice

When you register with us as a student for our distance learning courses you will be asked to confirm that you have viewed and understand the Student Privacy Notice. This tells you how we manage your information in line with the GDPR and the UK Data Protection Act 2018.

The University has a number of responsibilities around hosting speakers and events, based on its Ordinance 24.

Other privacy notices for various University services can be found below: 

The University sends some of your information to the Higher Education Statistics Agency (HESA) to form your HESA record. Please see HESA’s student and staff collection notices for more details.

The Staff Privacy Notice is relevant to current and former staff of the University:

University of London Institute in Paris

The privacy notice below contains general information for the University of London Institute in Paris and provides links to privacy information specific to the services we provide.

The statement below explains how the University of London Institute in Paris will process your personal information during the registration process. Your application data will form part of your student record. You will find data protection referred to in your terms and conditions. 

Your Rights

The GDPR gives individuals a number of rights regarding their data. You can find out more in our Rights Guide below:

Rights requests are, in most cases, free of charge and need to be responded to within 30 calendar days. A longer period and a fee may result if a request is particularly complex. 

Requests should be made to the Data Protection Officer at We may ask you for additional information to help process your request.

Examination Scripts

There is an exemption in data protection law regarding the release of examination scripts, which do not have to be disclosed. Examiners’ comments are not covered by this exemption. Comments recorded by an examiner about the performance of a candidate in an examination may be personal data and therefore available to a student making a subject access request. This is the case whether the comments are on the examination script or on a separate marking sheet.

To submit a request for comments please check the following guide and return the required information to:

The University’s Data Protection Officer

Head of Data Protection and Information Compliance

Data Protection and Information Compliance Manager
Vice-Chancellor's Office
University of London
Senate House
Malet Street
London WC1E 7HU

Please email: for further information and advice.