Skip to main content

GDPR Information for Research

Where research involves using personal data, under the General Data Protection Regulation (GDPR) participants must be informed of the following:

  • the identity and contact details of the controller and the data protection officer
  • the purpose of the processing and the lawful basis for the processing
  • the categories of personal data that will be collected
  • the recipients of the personal data
  • details of any transfers to countries outside the European Economic Area (EEA) and safeguards
  • the retention period for the data
  • the participant's data rights
  • the contact details for lodging a complaint

The above information should be provided within the Participant Information Sheet

If you have any questions, or require further information, please contact