GDPR Overview

GDPR is the EU's new General Data Protection Regulation (EU) 2016/679.  It comes into force across all of Europe on 25th May 2018.

It replaces the EU's previous Data Protection Directive (95/46/EC). 

GDPR governs the collection, use and storage of all personal data of living individuals.

As GDPR is a regulation instead of a directive, it takes immediate effect on the 25th May.

Does GDPR affect me?

If you collect, use or store personal data, digital, manual, handwritten or any type of record, then GDPR affects you.

Personal data relates to any information relating to a living individual, whether it relates to his or her private, professional or public life.

It can be anything from a name, photo, email address, bank details, posts on social media, medical information, even a computer IP address. 

Read the General Data Protection Regulation (EU) 2016/679 full text here.


This guidance has been prepared by the HRB to help researchers in the health domain comply with GDPR requirements.

It is intended to be general guidance for educational and informational purposes only.

It is not legal advice.