Data Protection

The University of York Students’ Union (YUSU) is committed to protecting the privacy and security of your personal information.  We aim to describe how we gather, store, manage and, where necessary, share your data in a clear, concise and open way, but if you have any questions or concerns regarding the handling of your data, please contact [email protected] and we will respond as soon as possible.


What is GDPR?

The General Data Protection Regulation (GDPR) is an EU regulation on privacy and data protection for all individuals within the European Union and European Economic Area.

It came into effect on the 25th May 2018 and is supplemented in the UK by the Data Protection Act (DPA), 2018.   Together, the GDPR and DPA control how your personal information is used by organisations, businesses or the government.

Data Protection laws are designed to give you more control over your personal data, to simplify the regulatory environment across the EU for data management and to balance the right to privacy with the right to freedom of expression and information.



In the UK, responsibility for providing guidance around compliance with the GDPR rests with the Information Commissioner’s Office (ICO) -

The University of York Students' Union is registered with the ICO as a data controller under the terms of the Data Protection Act.  Our registration number is ZA270378.

The Union's registration and notification of our uses of personal data can be viewed as part of the Public Register of Data Controllers maintained by the Information Commissioner's Office.


How to contact us

If you have queries about our Data Protection Policy then please contact our Data Protection Officer by email on [email protected] or by post at:

Data Protection Officer 
University of York Students’ Union
The Student Centre
James College
Newton Way
North Yorkshire
YO10 5DD
United Kingdom