In this 30-minute session, we will cover key GDPR requirements for academic research, including informed consent, data minimization, and security measures. We’ll discuss common compliance pitfalls and provide practical solutions, as well as explore the challenges of collaborating with institutions outside the EEA. After the presentation, there will be about 30 minutes for questions and discussion to provide further insights into applying GDPR in your research.

About the GDPR

The General Data Protection Regulation (GDPR) is a European Union law that came into effect in May 2018, designed to protect individuals' personal data and privacy. It applies to all organizations that process or control personal data. The regulation covers both European entities handling the personal data of individuals within the EU and organizations outside the EU that target or process data from EU residents. Non-compliance can lead to significant fines.

GDPR in research

For academic researchers, the GDPR imposes specific obligations when handling personal data in research projects, including obtaining informed consent, ensuring data minimization, and implementing robust security measures. 

When collaborating with institutions outside the EEA, GDPR compliance can present unique challenges, particularly in cross-border data transfers. Researchers must ensure that appropriate safeguards are in place to protect personal data shared with non-EEA partners. 

About the presenter

Anne Brouwer is a Policy Officer at Tilburg University, specializing in PhD and Research Integrity policy. She also serves as the Research Integrity Coordinator, managing training initiatives for researchers. Prior to this, Anne was the Institutional Review Board Manager and Data Representative at TiU’s School of Economics & Management. Before joining TiU, she was a lecturer and researcher in marketing and consumer behavior at Wageningen University and La Trobe University, where she earned her PhD on the topic of greenwashing.