Handling personal data in research with care
This information applies to all processing of personal data that takes place in the context of scientific research under the responsibility of Tilburg University and applies to anyone working under the responsibility of Tilburg University.
The GDPR also has a number of important implications for scientific research. By handling research data with carefrom the start, you no longer have to arrange matters at the end of the process. By establishing a processing basis and filling in a processing register, you have already thought about the necessity of the data, the type of data you need to collect and how you are going to collect, analyze and store it.
When using panel or public datasets, in some cases the GDPR does not apply, for example if the data is anonymous. This document helps determine whether the dataset falls within the scope of the GDPR.
Three phases of scientific research
In scientific research, three phases are relevant with respect to personal data: The phases before, during and, after the study.
These three phases have their own aspects with regard to the protection of personal data that the researcher must take into account.
During research, the following issues play a part for each phase:
Before
- Writing a research proposal
- Establishing the processing basis
- Application form Ethics, Data management and GDPR
- Designing a processing register
- Obtaining Informed consent
- Making an Ethical assessment
- Applying for grants
- Complying with the privacy policy
- Processing by third parties
-
How do I arrange for informed consent?
One of the legal processing principles for academic research is the respondent's consent. If special personal data are processed of as a part of academic research, explicit permission must be given by the respondent.
-
What about research data retention and retention periods?
When a research project is completed, the research data will need to be stored carefully. But how do you do that, and how long may (or must) the data be kept? On this page you will find more information about this.
-
What are the rights of respondents?
The respondent has a number of rights before, during and after the survey.
-
What are personal data and how do I process them carefully?
This guideline only applies if personal data are processed of academic research.
-
How do you guarantee the careful handling of research data with personal data?
During each research in which Personal Data is procesessed, it is important that this data is carefully handled. This page describes how you ensure the careful handeling of such data.
-
How do I deal with datasets that contain personal data?
Before the start of a research project, a researcher makes the decision to collect data him/herself or to use existing datasets or a combination of the two. This process, if applicable, takes place simultaneously with the application for the ethical review.
-
Registration form Ethics, Data Management and GDPR
Before starting scientific research, researchers must fill in a registration form concerning ethics, data management and the General Data Protection Regulation (GDPR).
-
Eye tracking
Some scientific studies use eye-tracking to track eye movements. One example is a study on the way people look at websites.
-
What are the different types of data sets?
Discussed are audio and video recordings, interviews and observations, experiments in labs, eye tracking and medical screening (MRI/EEC/ECG....)
-
Audio and video recordings as dataset
Audio and video recordings are regularly used in academic research. Sometimes these recordings can be made anonymous by blurring faces, or just filming hands, but this depends strongly on the purpose of the study.
-
Who is responsible for the research data policy?
The principal researcher is responsible for compliance with the research data policy and must ensure that everyone who participates in the research under his or her responsibility (e.g., PhD researchers, student-assistants and students) complies with the data protection policy and data management regulations.
-
Medical screening (MRI/EEG/ECG...)
A number of scientific studies make use of medical screening such as MRI, EEG and ECG. The results constitute special personal data, to which the following guidelines apply.
-
How do I deal with datasets that contain personal data?
Before the start of a research project, a researcher makes the decision to collect data him/herself or to use existing datasets or a combination of the two. This process, if applicable, takes place simultaneously with the application for the ethical review.
-
Wearables
If wearables, such as a Fitbit, are used for an academic study, the following guidelines apply.
