How to use this Handbook

The Data Privacy Handbook aims to make knowledge and solutions on handling personal data Findable, Accessible, Interoperable, and Reusable (FAIR) and present them in a practical format.

The Handbook need not be read like a textbook. You are invited to navigate to the topic you need based on the table of contents, or use the guide below.

What are you looking for?

I want to…:

• Learn about the GDPR in the context of scientific research

  • Introduction to the GDPR
  • Definitions
• Plan a GDPR-compliant research project

  • Designing your research project
  • Choosing a legal basis
  • Assessing the risks in your project, for example using a privacy scan, Data Protection Impact Assessment, or Data classification
  • Informing participants
  • Obtaining consent
  • Collaborating on personal data
  • Setting up agreements
• Work safely with personal data

  • Storing personal data
  • Finding suitable tools and services
  • De-identifying personal data
  • Securely analysing personal data
  • Sharing personal data during research
  • Using other approaches to protect personal data, such as encryption, statistical approaches to de-identification, synthetic data, or data donation
• Share personal data with others

  • Sharing data legally
  • Sharing personal data during research
  • De-identifying personal data
  • Securely analysing personal data
  • Using GDPR-compliant tools and services
  • Sharing personal data for reuse
  • Sharing personal data case by case
• Learn from other projects

  • Minimising personal data in a survey
  • Pseudonymising different types of data
  • Publishing metadata only
  • Reusing education data for research purposes
• Get help or information

  • Getting help at Utrecht University
  • Definitions
  • References

---

Data Privacy Handbook

The information presented here is provided as is, with no guarantees of accuracy or completeness. For the most up-to-date information, please refer to your privacy officer, the university website or intranet. We cannot be held responsible for any negative consequences due to incorrect interpretation or use, and inconsistencies with policies/views of other institutions.

💡 Give feedback about this page | Privacy policy | Cite the Data Privacy Handbook