Difference between revisions of "Theme:61d9a3f5-8f8b-4f6f-8363-fa53f959f131"
From The Embassy of Good Science
Marc.VanHoof (talk | contribs) |
|||
| (7 intermediate revisions by 4 users not shown) | |||
| Line 1: | Line 1: | ||
{{Theme | {{Theme | ||
|Theme Type=Good Practices | |Theme Type=Good Practices | ||
| − | |Title=The impact of the GDPR on | + | |Has Parent Theme=Theme:B2331451-5a6a-4aa2-a3d5-c68d2c96c8e1 |
| − | |Is About=On May 25th, 2018, the General Data Protection Regulation (GDPR) entered into force in Europe. The GDPR sets out the new rules researchers must adhere to when processing personal data. <ref>EU General Data Protection Regulation (GDPR) (2018). Available online at: https://gdpr-info.eu/</ref> Personal data is any data with which a person can be directly or indirectly identified. Researchers should conform to the GDPR principles of data protection to protect the privacy rights of their study participants and avoid legal issues. | + | |Title=The impact of the GDPR on scientific data |
| + | |Is About=On May 25th, 2018, the General Data Protection Regulation (GDPR) entered into force in Europe. The GDPR sets out the new rules researchers must adhere to when processing personal data.<ref>EU General Data Protection Regulation (GDPR) (2018). Available online at: https://gdpr-info.eu/</ref>Personal data is any data with which a person can be directly or indirectly identified. Researchers should conform to the GDPR principles of data protection to protect the privacy rights of their study participants and avoid legal issues. | ||
<references /> | <references /> | ||
|Important Because=Research data often contains personal characteristics, such as a name, location data, or physical, physiological, genetic or cultural features of a person. For these, the GDPR provides the following principles in [https://gdpr-info.eu/art-5-gdpr/ article 5]: | |Important Because=Research data often contains personal characteristics, such as a name, location data, or physical, physiological, genetic or cultural features of a person. For these, the GDPR provides the following principles in [https://gdpr-info.eu/art-5-gdpr/ article 5]: | ||
| Line 11: | Line 12: | ||
*"Data should be kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed. For scientific data, it is often recommended to use pseudonymization as a technique to further protect subject privacy. Long-term archiving for scientific purposes is allowed when in accordance to Article 89 of the GDPR." | *"Data should be kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed. For scientific data, it is often recommended to use pseudonymization as a technique to further protect subject privacy. Long-term archiving for scientific purposes is allowed when in accordance to Article 89 of the GDPR." | ||
*"Data should be processed in a manner that ensures appropriate security of the personal data, including protection against unauthorised or unlawful processing and against accidental loss." | *"Data should be processed in a manner that ensures appropriate security of the personal data, including protection against unauthorised or unlawful processing and against accidental loss." | ||
| − | |Important For= | + | |Important For=Students; Research subjects; Ethics committee members; Researchers; Research institutions; Policy makers; Supervisors; Postdocs; Journal publishers; Journal editors; industry stakeholders; Junior researchers; Senior researchers; General public; Research Integrity Officers; Funders; PhD Students |
| − | |Has Best Practice=Researchers that work with personal data can consult the GDPR online | + | |Has Best Practice=Researchers that work with personal data can consult the GDPR online [https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32016R0679 here]. In 2020 the European Data Protection Supervisor issued [https://edps.europa.eu/sites/edp/files/publication/20-01-06_opinion_research_en.pdf A Preliminary Opinion on data protection and scientific research]. |
| − | You should also be able to contact your local Data Protection Officer or study supervisor for more information on handling | + | You should also be able to contact your local Data Protection Officer or study supervisor for more information on handling personal data. |
| − | |Has | + | }} |
| + | {{Related To | ||
| + | |Related To Resource=Resource:F7ed25ad-cfab-4040-b52f-596accc3c317;Resource:9c917ab2-c01d-446b-89c1-a9cd415afb00;Resource:695b5c9b-f3ac-4fc8-8e20-1dfd5f7347ff;Resource:B47afc7d-44d6-4713-a209-953d58e81778;Resource:232ffbe0-b7fb-4d04-b605-493e10bc04c6 | ||
| + | |Related To Theme=Theme:540c9ba0-bc9c-4311-b3e1-7a650d2b9f0f;Theme:0bd48e3b-3590-44ae-a21b-7cf2b425d6cb | ||
| + | }} | ||
| + | {{Tags | ||
| + | |Has Virtue And Value=Accountability; Reliability; Care; Respect; Trustworthiness; Transparency | ||
| + | |Has Good Practice And Misconduct=Data Management; Data Protection | ||
}} | }} | ||
| − | |||
| − | |||
Latest revision as of 14:16, 22 October 2021
ThemesThe impact of the GDPR on scientific data
What is this about?
On May 25th, 2018, the General Data Protection Regulation (GDPR) entered into force in Europe. The GDPR sets out the new rules researchers must adhere to when processing personal data.[1]Personal data is any data with which a person can be directly or indirectly identified. Researchers should conform to the GDPR principles of data protection to protect the privacy rights of their study participants and avoid legal issues.
- ↑ EU General Data Protection Regulation (GDPR) (2018). Available online at: https://gdpr-info.eu/
Why is this important?
Research data often contains personal characteristics, such as a name, location data, or physical, physiological, genetic or cultural features of a person. For these, the GDPR provides the following principles in article 5:
- "Data should be processed lawfully, fairly and in a transparent manner."
- "Data should be collected for specified, explicit and legitimate purposes and is not further processed in a manner that is incompatible with those purposes."
- "Data should be adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed."
- "Data should be kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed. For scientific data, it is often recommended to use pseudonymization as a technique to further protect subject privacy. Long-term archiving for scientific purposes is allowed when in accordance to Article 89 of the GDPR."
- "Data should be processed in a manner that ensures appropriate security of the personal data, including protection against unauthorised or unlawful processing and against accidental loss."
For whom is this important?
StudentsResearch subjectsEthics committee membersResearchersResearch institutionsPolicy makersSupervisorsPostdocsJournal publishersJournal editorsindustry stakeholdersJunior researchersSenior researchersGeneral publicResearch Integrity OfficersFundersPhD Students
What are the best practices?
Researchers that work with personal data can consult the GDPR online here. In 2020 the European Data Protection Supervisor issued A Preliminary Opinion on data protection and scientific research.
You should also be able to contact your local Data Protection Officer or study supervisor for more information on handling personal data.The Embassy Editorial team, Iris Lechner, Signe Mezinska, Andrijana Perković Paloš, Lars Lambriks contributed to this theme. Latest contribution was Oct 22, 2021
