Personal data: What does GDPR mean for your research data?

It falls upon me to cover the ‘hot topic’ of research data and GDPR (European privacy legislation) just before a cold winter holiday break. This makes me feel like the last speaker in a session that has overrun – ‘So, I’m the only thing between you and your lunch …’ But none of this changes the fact that the General Data Protection Legislation – codified into British Law by the UK Data Protection Act, 2018 – is a very important factor for researchers working with human subjects to take into account.

This is why the topic of GDPR and data protection arose out of the case studies project that my colleagues completed this summer. This blog post introduces the last in the series of these RDM case studies: Personal data: What does GDPR mean for your research data?

YouTube Preview Image

Dr. Niamh Moore talks about how research has evolved to take data protection and ethics into account, focusing on the time-honoured consent form, and the need to take “a more granular approach” to consent: subjects can grant their consent to be in a study, but also to have their data shared–in the form of interview transcripts, audio or video files, diaries, etc., and can choose which of these they consent to and which they do not.

Consent remains a key for working with human subjects ethically and legally, but at the University of Edinburgh and other HEIs, the legal basis for processing research data by academic staff may not be consent, it may simply be that research is the public task of the University. This shifts consent into the ethical column, while also ensuring fair, transparent, and lawful processing as part of GDPR principles.

I was invited to contribute to the video as well, from a service provider’s perspective because our Research Data Support team advises and trains researchers on working with personal and sensitive data. One of my messages was of reassurance, that actually researchers already follow ethical norms that put them in good stead for being compliant with the Law.

Indeed, this is a reason that the EU lawmakers were able to be convinced that certain derogations (exceptions) could be allowed for in “the processing of personal data for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes,” as long as appropriate safeguards are used.

Our short video brings out some examples, but we could not cover everything a researcher needs to know about the GDPR – the University of Edinburgh’s Data Protection Officer has written authoritative guidance on research and data protection legislation for our staff and students and has also created a research-specific resource on the LEARN platform. Our research data support team also offers face to face training on Working with Personal and Sensitive Data which has been updated for GDPR.

I have tried to summarise how researchers can comply with the GDPR/UK Data Protection Act, 2018 while making use of our Research Data Service in this new Quick Guide–Research Data Management and GDPR: Do’s and Don’ts. Comments are welcome on the usefulness and accuracy of this advice!

Robin Rice
Data Librarian and Head, Research Data Support
Library & University Collections

Share

Interning with the Research Data Service

For almost four months, I have been interning with the Research Data Service (RDS) as a project assistant. I decided to apply for the internship simply because I had received RDS support when I was developing a Research Data Management (RDM) plan for my PhD project and I also wanted to gain experience that would help me develop my professional skills. I was beyond thrilled when I was accepted!

Photo of a sunflower on a window ledge

The RDS team entry to the office sunflower-growing competition

The project I was involved in was called the Dealing With Data Use Case Videos Project. Its aim was to gain insights into the research data management (RDM) practice of data service users in all three Colleges at the University. My main role was to interview academic staff and PhD students as well as support staff about their experiences of RDM and their views on the tools available at the University such as DataStore, DataShare, DataVault and so on. The insights gathered from the interview are valuable for the RDS team to improve their services. For my personal development, interviewing the participants has helped me to gain my confidence and hone my skills which I can directly apply for my PhD research. I also enjoyed learning about different research projects beyond my field and felt inspired by the participants, particularly in how they share their data publicly to advance research on their topic. Another part of my internship (which I found most interesting) was to conduct video interviews. I had the chance to work directly with the Video Production Team of Communications and Marketing and visited their studio. This was my first experience being involved in video filming and editing.

Photo of nameplate on the desk which says Clarissa

My nameplate on my desk

So, my internship now has come to end, but I won’t forget this amazing experience. I was very welcomed to be part of the team, had my own desk, joined some meetings and even out for lunch and drinks! It’s been truly a pleasure to work with such a great team and I can’t thank the RDS team enough for the opportunity to learn so much about the RDS and to extend my knowledge about RDM.

Catherine Clarissa
Research Data Service Project Assistant
Postgraduate Research Student
Nursing Studies, University of Edinburgh

Photo of the office window view showing Edinburgh Castle obscured by a crane

The view from the office window

 

 

Share