Data laws are changing. The General Data Protection Regulation (GDPR) comes into force on 25 May 2018 and represents a reshaping of the data protection landscape.

In simple terms, GDPR will help protect the personal data of those involved in rugby by requiring better governance and transparency.

Organisations holding personal data, including constituent bodies, referee societies and clubs, will need to give more information to people about what they do with those people’s data, why, and for how long.

You will find a copy of our Information/Privacy Policy within the Section titled "Policies"

Withdrawing consent or otherwise objecting to direct marketing

Wherever we rely on your consent, you will always be able to withdraw that consent, although we may have other legal grounds for processing your data for other purposes, such as those set out above.

In some cases, we are able to send you direct marketing without your consent, where we rely on our legitimate interests. You have an absolute right to opt-out of direct marketing, or profiling we carry out for direct marketing, at any time.

You can do this by following the instructions in the Information/Privacy Policy, where this is an electronic message, or by contacting us using the details set out in the Policy in the “How do I get in touch with you or the RFU?” section.