Corporate report

NDA's data protection policy

This policy defines the responsibilities of the NDA and its employees, contractors and consultants and ensures that all are aware, not only of the requirements of data protection legislation on the NDA itself, but also their individual responsibilities in this respect.


Data protection policy

This file may not be suitable for users of assistive technology. Request an accessible format.

If you use assistive technology (such as a screen reader) and need a version of this document in a more accessible format, please email Please tell us what format you need. It will help us if you say what assistive technology you use.


A failure to comply with the provisions of GDPR may render the NDA, or in certain circumstances the individuals involved, including the NDA Data Protection Officer and the relevant responsible Director(s), liable to criminal prosecution as well as giving rise to civil liabilities.

Published 3 May 2018
Last updated 26 July 2019 + show all updates
  1. New version including reference to Privacy Impact Assessment template
  2. First published.