View source for Theme:61d9a3f5-8f8b-4f6f-8363-fa53f959f131

{{Theme
|Theme Type=Good Practices
|Has Parent Theme=Theme:B2331451-5a6a-4aa2-a3d5-c68d2c96c8e1
|Title=The impact of the GDPR on scientific data
|Is About=On May 25th, 2018, the General Data Protection Regulation (GDPR) entered into force in Europe. The GDPR sets out the new rules researchers must adhere to when processing personal data.<ref>EU General Data Protection Regulation (GDPR) (2018). Available online at: https://gdpr-info.eu/</ref>Personal data is any data with which a person can be directly or indirectly identified. Researchers should conform to the GDPR principles of data protection to protect the privacy rights of their study participants and avoid legal issues.
<references />
|Important Because=Research data often contains personal characteristics, such as a name, location data, or physical, physiological, genetic or cultural features of a person. For these, the GDPR provides the following principles in [https://gdpr-info.eu/art-5-gdpr/ article 5]:

*"Data should be processed lawfully, fairly and in a transparent manner."
*"Data should be collected for specified, explicit and legitimate purposes and is not further processed in a manner that is incompatible with those purposes."
*"Data should be adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed."
*"Data should be kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed. For scientific data, it is often recommended to use pseudonymization as a technique to further protect subject privacy. Long-term archiving for scientific purposes is allowed when in accordance to Article 89 of the GDPR."
*"Data should be processed in a manner that ensures appropriate security of the personal data, including protection against unauthorised or unlawful processing and against accidental loss."
|Important For=Students; Research subjects; Ethics committee members; Researchers; Research institutions; Policy makers; Supervisors; Postdocs; Journal publishers; Journal editors; industry stakeholders; Junior researchers; Senior researchers; General public; Research Integrity Officers; Funders; PhD Students
|Has Best Practice=Researchers that work with personal data can consult the GDPR online [https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32016R0679 here]. In 2020 the European Data Protection Supervisor  issued [https://edps.europa.eu/sites/edp/files/publication/20-01-06_opinion_research_en.pdf A Preliminary Opinion on data protection and scientific research].

You should also be able to contact your local Data Protection Officer or study supervisor for more information on handling personal data.
}}
{{Related To
|Related To Resource=Resource:F7ed25ad-cfab-4040-b52f-596accc3c317;Resource:9c917ab2-c01d-446b-89c1-a9cd415afb00;Resource:695b5c9b-f3ac-4fc8-8e20-1dfd5f7347ff;Resource:B47afc7d-44d6-4713-a209-953d58e81778;Resource:232ffbe0-b7fb-4d04-b605-493e10bc04c6
|Related To Theme=Theme:540c9ba0-bc9c-4311-b3e1-7a650d2b9f0f;Theme:0bd48e3b-3590-44ae-a21b-7cf2b425d6cb
}}
{{Tags
|Has Virtue And Value=Accountability; Reliability; Care; Respect; Trustworthiness; Transparency
|Has Good Practice And Misconduct=Data Management; Data Protection
}}