GDPR Information for Research

GDPR Information for Research

Where research involves using personal data, under the General Data Protection Regulation (GDPR) participants must be informed of the following:

  • The identity and contact details of the controller and the data protection officer
  • The purpose of the processing and the lawful basis for the processing
  • The categories of personal data that will be collected
  • The recipients of the personal data
  • Details of any transfers to countries outside the European Economic Area (EEA) and safeguards
  • The retention period for the data
  • The participant's data rights
  • The contact details for lodging a complaint

The above information should be provided within the Participant Information Sheet.

If you have any questions, or require further information, please contact