PROSPERO Contributor Privacy Notice

This privacy notice is for researchers submitting applications for registration of their systematic reviews on PROSPERO, International prospective register of systematic reviews, based at the University of York.

It sets out how PROSPERO gathers, uses, stores and shares your data, including how long we keep your data and what rights you have in relation to your data under the General Data Protection Regulation (GDPR).

For the purposes of this privacy notice, the University of York is the Data Controller, as defined in the General Data Protection Regulation. The University of York is registered with the Information Commissioner’s Office, the entry details of which can be found here. The registration number is: Z4855807.

Where do we get your data from?
You provide data when you submit a record for registration, or when you create a PROSPERO account (an account is needed to make a submission).

What data do we have?
Personal data including a person’s name, email address, phone number, postal address and institution may be provided. Only the name, email address and institutional affiliation are mandatory for registration.

How do we use your data and what is our legal basis for processing your data?
Data will be used to communicate with you about your registration(s) and will be processed for purposes of registration of systematic review protocols, in line with the aims of PROSPERO detailed at

Submissions that have been waiting for registration for more than 30 days and which pass a basic automated check will be published automatically.
The PROSPERO team will not check these submissions; this will be stated clearly on the published record. Records will be published exactly as submitted. Submissions which do not pass the basic automated check will be automatically rejected.

Processing is necessary for the performance of a task carried out in the public interest.

Who do we share your data with?
If the record is successful for registration, it will be published on the PROSPERO public website at The names, email addresses and institutional affiliations provided in a submission will be viewable on the public website. We do not directly share data with any other party.

Further information
For further information on how the University uses your data and your rights under data protection legislation see,