Nothing Special   »   [go: up one dir, main page]
Scribd Logo
Upload

Welcome to Scribd!

  • 51 views

    Data Protection Requirements Checklist

    Uploaded by

    saifulaziz
    This document provides a checklist of 13 data protection requirements that must be addressed before submitting an ethics application form for a research project. The checklist covers obtaining consent, specifying the lawful basis and special categories of personal data processing, implementing appropriate safeguards for data collection and storage, ensuring terms are correctly used, specifying data location, complying with international data transfer requirements, documenting any third party involvement, completing a data protection impact assessment if high risk, following child research guidance, completing compliance training, and notifying the data protection coordinator. Adhering to these requirements helps certify that all necessary data protection steps have been taken for the research.

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd

    Data Protection Requirements Checklist

    Uploaded by

    saifulaziz
    51 views1 page
    This document provides a checklist of 13 data protection requirements that must be addressed before submitting an ethics application form for a research project. The checklist covers obtaining consent, specifying the lawful basis and special categories of personal data processing, implementing appropriate safeguards for data collection and storage, ensuring terms are correctly used, specifying data location, complying with international data transfer requirements, documenting any third party involvement, completing a data protection impact assessment if high risk, following child research guidance, completing compliance training, and notifying the data protection coordinator. Adhering to these requirements helps certify that all necessary data protection steps have been taken for the research.

    Original Description:

    Original Title

    data_protection_checklist_for_researchers

    Copyright

    © © All Rights Reserved

    Available Formats

    PDF, TXT or read online from Scribd

    Did you find this document useful?

    Is this content inappropriate?

    This document provides a checklist of 13 data protection requirements that must be addressed before submitting an ethics application form for a research project. The checklist covers obtaining consent, specifying the lawful basis and special categories of personal data processing, implementing appropriate safeguards for data collection and storage, ensuring terms are correctly used, specifying data location, complying with international data transfer requirements, documenting any third party involvement, completing a data protection impact assessment if high risk, following child research guidance, completing compliance training, and notifying the data protection coordinator. Adhering to these requirements helps certify that all necessary data protection steps have been taken for the research.

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd
    Download as pdf or txt
    51 views1 page

    Data Protection Requirements Checklist

    Uploaded by

    saifulaziz
    This document provides a checklist of 13 data protection requirements that must be addressed before submitting an ethics application form for a research project. The checklist covers obtaining consent, specifying the lawful basis and special categories of personal data processing, implementing appropriate safeguards for data collection and storage, ensuring terms are correctly used, specifying data location, complying with international data transfer requirements, documenting any third party involvement, completing a data protection impact assessment if high risk, following child research guidance, completing compliance training, and notifying the data protection coordinator. Adhering to these requirements helps certify that all necessary data protection steps have been taken for the research.

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd
    Download as pdf or txt
    of 1

    Data Protection Requirements Checklist

    Please use this adapted template to certify that all data protection requirements have been addressed
    prior to submitting your ethics application form and supporting documents for review, thank you.

    Tick
    Box
    R
    1. Check to see if project is an extension of previous research and if so provide the research
    reference number
    2. Consent Form and Participant Information Sheet completed and provided including privacy
    notice
    3. i. Local project privacy notice is in place and contains the criteria set out in Articles 13/14
    of GDPR – see Where can I check that I have completed my Privacy Notice correctly?

    ii. Local project privacy notice links to one of the main UCL general research participant
    privacy notice

    ii. Lawful basis for processing personal data is stated as ‘performance of a task in the
    public interest’ and special category or criminal convictions data is stated as ‘research
    purposes’
    4. Appropriate safeguards are in place as per this guidance
    - Collect only the minimum amount of personal data required to carry out the research
    - Use pseudonymised personal data
    - Anonymise data where possible
    - Safeguards against accidental disclosure and loss or corruption of data. See here
    - Ensure that the processing will not cause substantial damage or distress to individuals
    - Ensure that the processing will not be used to support measures or decisions with
    respect to a particular individual
    - Confirm evidence of the information security measures in place, eg encryption
    5. Ensure the terms anonymization and pseudonymisation are used correctly in form
    6. The location of the data is specified, ie:
    - On UCL servers
    - In the UK
    - In the EEA
    - Outside the EEA
    7. If personal data is stored outside the EEA, ensure that measures are in place to comply with
    data protection legislation. See guidance here
    8. Indicate whether third parties, such as other universities or processors, are involved with
    processing or storage of data
    a. If so, confirm data sharing/processing arrangements in place?
    b. If not, refer them to research services/contracts or procurement or solicitor in Legal
    Services
    9. DPIA screening questions have been completed by staff if research deemed high risk
    a. If so, the DPIA has been provided
    10. If the research involves children, the Research with Children Guidance been followed
    11. The information compliance training been undertaken within the last two years
    - Freedom of information
    - Data protection
    - Information security
    12. Provisions are in place around confidentiality, e.g. wording in participant information sheet
    13. Data Protection Coordinator has been notified

    You might also like