GDPR: when does it apply to my research?

The General Data Protection Regulation (GDPR) applies

  • when you (or your institution or organisation) process personal data in the framework of scientific research (e.g. collection, recording, classification, structuring, storage, adaptation or alteration, retrieval, consultation, use, etc.), regardless of the origin of the personal data
  • when you (or your institution or organisation) act as the data controller, and therefore decide alone or together with another researcher/institution on the purpose and means of the processing
  • when you (or your institution or organisation) act as the processor, this means that you process personal data on behalf of a third party

More information

More tips

Translated tip


Last modified March 30, 2020, 1:35 p.m.