GDPR.pdf - Report Master TIN study group 10LFXXX Year II...

Report
Master TIN,
study group 10LFXXX, Year II
Application of GDPR rules in
research activities
Author:
Submitted to:
Dr. YYY
April 22, 2022

Contents
1 Introduction 2
1.1 Privacy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2
1.2 Data protection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2
2 What is personal data? 3
2.1 Examples of personal data . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3
2.2 Examples of non-personal data . . . . . . . . . . . . . . . . . . . . . . . . . 4
2.3 Processing personal data . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4
2.4 Principles for processing personal data . . . . . . . . . . . . . . . . . . . . . 4
2.5 Determining lawful data processing for research . . . . . . . . . . . . . . . . 5
3 Impact of GDPR on research 6
3.1 Defining research . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6
3.1.1 Scientific research . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6
3.1.2 Historical research . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7
3.1.3 Statistical research . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7
4 Safeguards of GDPR 7
5 Data controller 8
6 Conclusion 8
1

In this report, we have studied the General Data Protection Regulation (GDPR) role in
scientific work. Moreover, how GDPR ensures the protection of personal and organizational
data from acquiring, holding, and using is analyzed. Apart from that, privacy and data pro-
tection have also been discussed. Then, we have defined the personal data, general examples
of it with the process applied to it. After that, we have determined lawful data processing.
The impact of GDPR on scientific, historical, and statistical research is also studied. At last,
some details about the safeguards of GDPR and data controllers are also discussed.
1 Introduction
The replacement of data protection directive 95/46/EC is made by GDPR in 2018. GDPR
ensures data protection of the residents from the organizations that are using it. It not only
regulates privacy but also boosts harmony among different states member. It also provides an
exception in the case of historical, scientific, and health research. As research has a privileged
position, therefore, the organizations that conduct research using personal data are exempt
from the restrictions. Moreover, these organizations have the right to share personal data
with other countries to conduct research. In the era of big data, the data of many public
and private organizations may be used by data scientists for performing quality research [1].
However, it is not clear the level of exception for the scientific work by the GDPR. As for as
the data is safeguarded, the GDPR allows organizations to use data for innovation. Because
the privacy and protection of data are basic rights, therefore, they should be protected. The
details of privacy and data protection are as follows.
1.1 Privacy
In different cultures and contexts, privacy could be of different things. Therefore, it is
required to clarify the motivation behind the conduction of research for the understanding
of privacy. In the research, privacy is the main concept of ethics. For example, a surveyor
researching the social behavior of the society. Therefore, a question about the blood donation
is made from the individuals. So, to keep the privacy, the surveyor should keep the name
and other information of the participants. Moreover, in the case of convert research, when it
shows clear benefits for the society.