GDPR Policy and Guidance

A full pdf version of the Data Protection Policy and Guidance Handbook are available here:

Data Protection Impact Assessment (DPIA) forms

Before completing a DPIA form you must complete a Screening form. This should either be the Screening form below or for Research Projects being considered by GUEP, the screening questions that are part of the ethical approval process.

Once the appropriate screening form has been completed then one of the following DPIA forms should be filled in.

Please note that completing a DPIA is an iterative process in conjunction with the Data Protection Unit.  Please allow plenty of time before your project is due to start/launch to complete your DPIA form.

If you are using legitimate interests for your lawful basis for processing you will also need to complete a Legitimate Interests Assessment (LIA) Checklist.

Other forms/templates for GDPR

Privacy Notices