The legislation related to the processing of personal data is the Data Protection Act 2018 (DPA 2018) which must be read alongside the UK GDPR. The UK GDPR is based on the EU GDPR, which applied to the UK prior to 1 January 2021, but which has now been updated to reflect the UK position.
The majority of the University’s processing will be carried out under the DPA 2018 and the UK GDPR, but when processing the personal data of individuals in Europe, we will do so in line with the requirements of the EU GDPR