The General Data Protection Regulation (UK GDPR) and Data Protection Act 2018 replace the Data Protection Act 1998 and together form the UK’s Data Protection law.
Data Protection Law sets out individuals’ rights as they pertain to personal information gathered by the ICR. In some cases, particularly research, exemptions to these rights may apply and we will advise you if this is the case.
You have the right to access your personal information. You can find out if we hold any personal information by making a ‘data subject access request’. You can use the Data Subject Access Request Form (PDF) to make a request, although this is not compulsory. If we do hold information about you, we will:
- give you a description of it
- tell you why we are holding it
- tell you where we got it from
- tell you who it could be disclosed to
- provide you a copy of the information in an intelligible form.
You have the right not to be subject to a decision based solely on automated processing, the right to request data portability, the rectification or erasure of personal data, restrict its processing or object to processing.
Some of your information may be transferred to third parties who work together with us or on the ICR’s behalf. These third parties may be within or outside of the United Kingdom (UK). Certain countries outside of the UK may not have laws which protect your privacy to the same extent as the Data Protection Act 2018 (UK GDPR). In the event that your information is transferred outside of the UK or Europe the ICR will take all reasonable steps to protect your privacy.
If you would like further information or have any concerns about the use of your personal information, please email firstname.lastname@example.org or write to:
The Data Protection Officer
The Institute of Cancer Research
123 Old Brompton Road
London SW7 3RP
You also have the right to lodge a complaint about any use of your personal information with the Information Commissioners’ Office (ICO), UK’s national data protection regulator.
The Institute of Cancer Research is registered with the Information Commissioner's Office under number Z6775661.
We keep our privacy notice under regular review. This privacy notice was last updated on 23 October 2023.