This Data Protection Policy explains: 

• what personal data is and how it is used; 

• where and when this policy applies, including productions, offices, studios and on-location work; 

• the legal principles that apply to processing personal data; 

• how personal data should be stored, shared and kept secure; 

• what rights individuals have in relation to their personal data; and 

• what to do if there is a data breach. 

This policy applies to the processing of personal data across all working relationships in the screen industries, including employees, freelancers, contractors, volunteers and others whose data is handled in connection with screen work. 

This policy should be read as both a statement of expectations and a practical guide for handling personal data lawfully, fairly and securely.

This policy is for screen businesses that collect or process personal data in the course of their work, including data relating to: 

• employees, freelancers and workers; 

• senior leaders, managers and supervisors; and 

• trainees, interns and volunteers.  

The screen industries often involve fast-moving productions, remote working and the sharing of personal data across teams and organisations, making it especially important that data protection responsibilities are clear and consistently applied. 

It is designed to be used with:  

• relevant data protection legislation, including the UK GDPR and the Data protection Act 2018;  

• contracts and terms of engagement; 

• data retention and record-keeping policies; and 

• HR and payroll policies.  

This policy is not intended to:  

• act as a substitute for legal advice; 

• cover every possible data protection scenario in detail;  

• exist simply to demonstrate compliance, without being properly implemented; or 

• remove the need for professional judgment when handling personal data.  

Personal data is essential to how the screen industries operate, but it must be handled responsibly. Poor data handling can cause real harm to individuals, disrupt productions and expose businesses to legal and reputational risk. 

Everyone covered by this policy has a responsibility to handle personal data with care and to respect people’s privacy. 

Our commitment to best practice in the screen industries 

This policy reflects best practice guidance developed for the UK screen industries and aligns with recognised industry standards, including:  

• the UK GDPR principles;  

• guidance from the Information Commissioner’s Office (ICO).