The University's guidance on legislative compliance, including extensive information about data protection.
A guide to applying the principles of the Data Protection Act to personal data, intended for those who have day-to-day responsibility for data protection. It explains the purpose and effect of each principle, gives practical examples, and answers frequently asked questions.
A web page from the NHS Health Research Authority, giving guidance on the use of personal data in health research, including details of relevant legislation.
A range of online training, including a module titled Research, GDPR and Confidentiality: What You Really Need to Know.
Guidance from the MRC about accessing health data for research, and data and confidentiality law.
Information about the 2018 Data Protection Act (which implemented GDPR as part of UK law) from the GOV.UK website.