Skip to content
Skip to navigation menu


Data Protection Advice for Researchers

The Data Protection Act 1998 will apply whenever research is conducted using data from lining identifiable individuals. 

Cardiff University is registered with the Information Commissioner as a Data Controller who processes personal data for research purposes.  Our registration number is Z6549747.  

Guidance on how the Data Protection Act will affect your research and your obligations under it, is available for download from this page.

Mental Incapacity

Research requiring consent that may involve participants 16 years and over who lack the capacity to consent for themselves is governed by the Mental Capacity Act 2005. Information about seeking consent for non-clinical research under those circumstances is available here: