personal data protection in research involving humans
TRANSCRIPT
![Page 1: Personal Data Protection in Research Involving Humans](https://reader030.vdocument.in/reader030/viewer/2022012100/6169d8b511a7b741a34c058d/html5/thumbnails/1.jpg)
Personal Data Protection in Research Involving Humans
GDPR and ethics perspective
Marc Vives - Silvia Losa 15th June 2018
![Page 2: Personal Data Protection in Research Involving Humans](https://reader030.vdocument.in/reader030/viewer/2022012100/6169d8b511a7b741a34c058d/html5/thumbnails/2.jpg)
Content
Data protection principles
Personal data section of ERC’s ethics self-assessment
Personal Data Protection in Research Involving Humans
![Page 3: Personal Data Protection in Research Involving Humans](https://reader030.vdocument.in/reader030/viewer/2022012100/6169d8b511a7b741a34c058d/html5/thumbnails/3.jpg)
Content
Data protection principles
Personal data section of ERC’s ethics self-assessment
Personal Data Protection in Research Involving Humans
![Page 4: Personal Data Protection in Research Involving Humans](https://reader030.vdocument.in/reader030/viewer/2022012100/6169d8b511a7b741a34c058d/html5/thumbnails/4.jpg)
Cicero denounces Catiline. Cesare Maccari - 1889 https://commons.wikimedia.org/wiki/File:Maccari-Cicero.jpg
In ancient times citizenship was about being part of social events. The term ”privacy” didn’t exist.
Intimacy +
Personal Data Protection
Privacy =
Data protection principles
![Page 5: Personal Data Protection in Research Involving Humans](https://reader030.vdocument.in/reader030/viewer/2022012100/6169d8b511a7b741a34c058d/html5/thumbnails/5.jpg)
Data protection principles
http://getwallpapers.com/wallpaper/full/0/8/7/540775.jpg
Personal Data any information
relating to an identified or identifiable
natural person
Data ownership Personal Data
always belongs to the data
subject
![Page 6: Personal Data Protection in Research Involving Humans](https://reader030.vdocument.in/reader030/viewer/2022012100/6169d8b511a7b741a34c058d/html5/thumbnails/6.jpg)
Special categories of personal data • Racial or ethnic origin • Political opinions • Religious or philosophical beliefs • Trade-union membership • Health, sex life, sex orientation • Genetic, biometric data
Special consent and security measures apply
Minors • Consent must be provided by the
holder of parental responsibility • In Spain under 14 years old • In other EU countries may differ
Data protection principles
![Page 7: Personal Data Protection in Research Involving Humans](https://reader030.vdocument.in/reader030/viewer/2022012100/6169d8b511a7b741a34c058d/html5/thumbnails/7.jpg)
Data protection principles
Hannibal traverse le Rhône. Henri Motte. 1878 British Museum
'Data Controller’ the body which determines the
purposes and means of the processing of
personal data
![Page 8: Personal Data Protection in Research Involving Humans](https://reader030.vdocument.in/reader030/viewer/2022012100/6169d8b511a7b741a34c058d/html5/thumbnails/8.jpg)
Data protection principles
Hannibal traverse le Rhône. Henri Motte. 1878 British Museum
'Data Processor’ a body which
processes personal data on behalf of the
data controller
![Page 9: Personal Data Protection in Research Involving Humans](https://reader030.vdocument.in/reader030/viewer/2022012100/6169d8b511a7b741a34c058d/html5/thumbnails/9.jpg)
Data protection principles
Personal data shall be:
(a) processed lawfully, fairly and in a
transparent manner in relation to the data subject
(b) collected for specified, explicit and
legitimate purposes and not further processed in a manner that is incompatible with these purposes;
further processing for scientific
research purposes, subject to appropriate safeguards for the rights and freedoms of the data subject, shall not be considered to be incompatible with the initial purposes
![Page 10: Personal Data Protection in Research Involving Humans](https://reader030.vdocument.in/reader030/viewer/2022012100/6169d8b511a7b741a34c058d/html5/thumbnails/10.jpg)
Data protection principles
Privacy by design Privacy by default
![Page 11: Personal Data Protection in Research Involving Humans](https://reader030.vdocument.in/reader030/viewer/2022012100/6169d8b511a7b741a34c058d/html5/thumbnails/11.jpg)
Data protection principles
Accountability Record of processing activities Risk Assessment Data Protection Impact Assessment
![Page 12: Personal Data Protection in Research Involving Humans](https://reader030.vdocument.in/reader030/viewer/2022012100/6169d8b511a7b741a34c058d/html5/thumbnails/12.jpg)
Data protection principles
Data minimization Dataset size Preservation period
![Page 13: Personal Data Protection in Research Involving Humans](https://reader030.vdocument.in/reader030/viewer/2022012100/6169d8b511a7b741a34c058d/html5/thumbnails/13.jpg)
Data protection principles
Technical and organizational security measures
Anonimisation Pseudonimisation
![Page 14: Personal Data Protection in Research Involving Humans](https://reader030.vdocument.in/reader030/viewer/2022012100/6169d8b511a7b741a34c058d/html5/thumbnails/14.jpg)
Data protection awareness
Pseudonimisation
Identification data Research data
John John’s answers
Mary Mary’s Answers
Research dataset
Identification data Id.
John 001
Mary 002
Pseudonimisation file
Id. Research data
001 John’s answers
002 Mary’s Answers
Pseudonimized Dataset
![Page 15: Personal Data Protection in Research Involving Humans](https://reader030.vdocument.in/reader030/viewer/2022012100/6169d8b511a7b741a34c058d/html5/thumbnails/15.jpg)
Content
Data protection principles
Personal data section of ERC’s ethics self-assessment
Personal Data Protection in Research Involving Humans
![Page 16: Personal Data Protection in Research Involving Humans](https://reader030.vdocument.in/reader030/viewer/2022012100/6169d8b511a7b741a34c058d/html5/thumbnails/16.jpg)
Does your research involve personal data collection and / or processing ?
YES NO
Data protection awareness
![Page 17: Personal Data Protection in Research Involving Humans](https://reader030.vdocument.in/reader030/viewer/2022012100/6169d8b511a7b741a34c058d/html5/thumbnails/17.jpg)
If your research involves personal data collection and / or processing, then you have to provide:
1. Data collection details
2. Procedures for data storage & processing
3. Data safety analysis
4. Preservation protocol
5. Dissemination of datasets expectations
6. Third party transfers projection
Data protection awareness
![Page 18: Personal Data Protection in Research Involving Humans](https://reader030.vdocument.in/reader030/viewer/2022012100/6169d8b511a7b741a34c058d/html5/thumbnails/18.jpg)
1. Data collection details (personal data source)
Data protection awareness
Data owner
Legitimation
Fairness
Informed
consent
Third party
Dataset details
Origin and lawfullness
Owner’s permission
![Page 19: Personal Data Protection in Research Involving Humans](https://reader030.vdocument.in/reader030/viewer/2022012100/6169d8b511a7b741a34c058d/html5/thumbnails/19.jpg)
Non-Disclosure Agreements
Data processing contracts
Risk analysis
Data Privacy Impact Assessment
…
a) Organisational measures
2. Procedures for data storage & processing
3. Data safety analysis
4. Preservation protocol
Data protection awareness
![Page 20: Personal Data Protection in Research Involving Humans](https://reader030.vdocument.in/reader030/viewer/2022012100/6169d8b511a7b741a34c058d/html5/thumbnails/20.jpg)
Data protection awareness
b) Technical measures
Data access control
(and sometimes access logging)
Encryption
Anonymisation
Pseudonimisation
Backup
…
2. Procedures for data storage & processing
3. Data safety analysis
4. Preservation protocol
![Page 21: Personal Data Protection in Research Involving Humans](https://reader030.vdocument.in/reader030/viewer/2022012100/6169d8b511a7b741a34c058d/html5/thumbnails/21.jpg)
Data protection awareness
5. Personal data dissemination
6. Third party transfers
Anonimisation
Consistency with Informed consent
Terms & conditions
Data transfer procedures
Special regulations in the case of transfers outside EEE
![Page 22: Personal Data Protection in Research Involving Humans](https://reader030.vdocument.in/reader030/viewer/2022012100/6169d8b511a7b741a34c058d/html5/thumbnails/22.jpg)
Thank you !!!
Images reproduced with permission for non-commercial use from: http://www.britishmuseum.org
http://www.navy.mil http://www.pixabay.com
http://commons.wikipedia.org