NEC4 Practice Note Issued – Complying with GDPR

NEC4 Practice Note Issued – Complying with GDPR
This note provides guidance on the information that needs to be included in an NEC4 contract which includes the processing of personal data as defined in the GDPR in order to comply with Article 28. It describes the requirements in relation to an NEC4 Engineering and Construction Contract (ECC), but equivalent clauses would be needed on other NEC4 contracts when applicable. Any processing of personal data must be carried out in accordance with other requirements of GDPR; this practice note does not extend to those requirements.

NOTE: Similar provisions are needed in the Works Information or equivalent of an NEC3 contract which requires the processing of personal data. The terms should be changed to reflect the defined terms in the appropriate NEC3 contract.

If an NEC3 or NEC4 contract has already been awarded, the Scope (or equivalent) may need to be changed to add in any of these provisions that are not already covered by the contract. Such a change would be a compensation event.

Click here to download practice note
Recent Projects

Recent news

NEC Contracts Launches Chinese Translation in Historic Partnership with Hong Kong and Qianhai

NEC Contracts Launches Chinese Translation in Historic Partnership with Hong Kong and Qianhai

NEC Contracts has unveiled its first Chinese language translation of the NEC4 Engineering and Construction Contract (ECC) Hong Kong Edition, marking a landmark expansion into mainland China.

2026 NEC Training in the UK

2026 NEC Training in the UK

From new starters to experienced professionals, our 2026 training equips you to navigate NEC contracts with clarity, manage risks effectively, and deliver projects collaboratively.

2026 NEC Training in Asia Pacific

2026 NEC Training in Asia Pacific

Official NEC training programme gives you direct access to the source and offers the most authoritative, practical and up-to-date learning experience.

View all news