Data protection for researchers

Curriculum

4 Sections
13 Lessons
30 Minutes

Expand all sectionsCollapse all sections

Basics of personal data processing in research
5
Planning the use of personal data in research
4
Responsibilities in the processing of personal data
3
Conclusion
2
- 4.1
  Test your knowledge
  10 Minutes5 Questions
- 4.2
  Summary and useful links

Lifecycle of personal data processing

The processing of personal data must have a clearly defined start and end point. Findata grants data permits for a fixed period, covering only the time required for the stated purpose.

The research plan should specify whether the project is a one-time study or a longitudinal study requiring a longer processing period. The retention period must always be as short as possible. Once the research has concluded, data must not be retained without justification.

A research project should assess the following three stages:

1. Processing during the research

How long will personal data be actively processed during the research?

↓

2. Retention after the research

Will the data still be needed after the study has been completed, for example to verify results? If so, for how long and on what grounds?

↓

3. Actions at the end of the retention period

Data must be deleted or destroyed appropriately once retention is no longer necessary.