NEC4 Practice Note Issued – Complying with GDPR

NEC4 Practice Note Issued – Complying with GDPR
This note provides guidance on the information that needs to be included in an NEC4 contract which includes the processing of personal data as defined in the GDPR in order to comply with Article 28. It describes the requirements in relation to an NEC4 Engineering and Construction Contract (ECC), but equivalent clauses would be needed on other NEC4 contracts when applicable. Any processing of personal data must be carried out in accordance with other requirements of GDPR; this practice note does not extend to those requirements.

NOTE: Similar provisions are needed in the Works Information or equivalent of an NEC3 contract which requires the processing of personal data. The terms should be changed to reflect the defined terms in the appropriate NEC3 contract.

If an NEC3 or NEC4 contract has already been awarded, the Scope (or equivalent) may need to be changed to add in any of these provisions that are not already covered by the contract. Such a change would be a compensation event.

Click here to download practice note
Recent Projects

Recent news

2026 NEC Training in the UK

2026 NEC Training in the UK

From new starters to experienced professionals, our 2026 training equips you to navigate NEC contracts with clarity, manage risks effectively, and deliver projects collaboratively.

New NEC post-nominals give accredited professionals clearer recognition

New NEC post-nominals give accredited professionals clearer recognition

NEC has introduced a new set of post-nominals for accredited professionals, with new award-specific titles that more accurately reflect each individual's NEC expertise.

Introducing the NEC4 FMC Service Manager Accreditation

Introducing the NEC4 FMC Service Manager Accreditation

NEC is pleased to introduce the NEC4 Facilities Management Contract (FMC) Service Manager Accreditation; the latest addition to NEC’s suite of professional accreditations and a major step forward.

View all news