This applies to all research projects in which personal data are collected:
When collecting and processing personal data in research, the requirements of the regulations set out in EU-General Data Protection Regulation (GDPR) in its current version must be observed:
1.Any research project involving the collection of data on humans or animals must be carried out in accordance with the provisions of GDPR.
2.That means: Participants have to
- receive a written study information
- receive a written information on data processing
- sign a consent form
3.For 2., the rules and regulations developed by the vice rector for research in cooperation with the data protection official (templates, technical specifications for voice recordings, participation of students in research work, etc.) are mandatory. Any changes to these must be justified by the Ethics Committee and require the written approval of the Ethics Committee after review by the Ethics Committee.
Obligations of the research project leader according to GDPR
The project leader is obliged to ensure that
- only devices without access to the Internet are used for voice recording (e.g.: no smartphone, tablets etc.!)
- the data are protected against accidental or illicit destruction or loss and the use of the data is carried out properly.
- the data are not accessible to unauthorized persons.
- the data are pseudonymized. The information relating directly to a person must be encrypted immediately.
- the personal reference to the data is completely removed as soon as it is no longer necessary for research or statistical work.
- the data are only made accessible to a person processing the data (e.g. within the framework of an externally commissioned statistical evaluation or the transcription of sound recordings) in an anonymized form.
- the planned transfer of personal data to others (e.g. for research cooperation or to external processors) is notified to the Ethics Committee with reasons.
- the data are kept in anonymized form after completion of the research project in accordance with the SFU’s data protection guidelines. It should be noted that interviewers are under a particular professional duty of confidentiality!