On 25 May 2018, the most significant piece of European data protection legislation to be introduced in 20 years will come into force. The EU General Data Protection Regulation (GDPR) replaces the 1995 EU Data Protection Directive​. The GDPR strengthens the rights that individuals have regarding personal data relating to them and means there is one set of data protection rules for all organisations operating in the EU, wherever they are based.

We are committed to GDPR compliance and remain committed to providing robust privacy and security protections across our systems. 

To ensure our systems comply with the new EU data protection rules, we have reviewed all our systems and we are making some changes. 

1. All users must register for themselves, if they are not already registered

Anyone who is to be added to a proposal as a co-investigator must be registered in the ISIS online system before they can be added (previously it has been possible for a proposal author to add other people without them being registered).  This doesn’t affect anyone who is already registered – just people who are not already in the system.  

Please ask any colleagues who are new to the facility to register so that you can add them to proposals – the registration site is here: https://users.facilities.rl.ac.uk/auth/CreateAccount.aspx​ 

2. Keep you better informed who we share data with

Across all our systems, we will be making it clearer why we ask you for personal information.

We are also updating our terms and conditions and privacy notice to better explain what we do with the personal data we collect.

We are also adding a privacy tab so you can update your details and have greater control over how we use your personal data.

3. Reviewed what is necessary we ask

We will stop collecting some information we no longer need.

Where we still need some of the personal information but not as much as before we will change what we ask. 

For example, if anything happens to you while you are visiting us we need to have someone we can contact immediately. Previously we asked you for details of your next of kin but now we will just ask you for an emergency contact phone number. This could be a contact number at your organisation who will then be able to contact others (colleagues, family etc) as appropriate.​