Information and consent
Researchers are generally required to provide information to the persons they will be obtaining information on. NSD has prepared a template for an information letter.
Researchers must always obtain consent from persons they will be collecting information on. This also applies if the data is collected from sources other than through direct contact with a respondent or informant.
Notifying the project to NSD
VID has a duty to register and document the processing of personal data in research. NSD must be notified of all research projects that entail the processing of personal data as defined in this procedure. In order to ascertain whether your project is notifiable, you can take the test available at the NSD website.
Data processor agreement
If, in your role as a researcher at VID, you outsource all or part of the processing of personal data to an external party, this party is defined as the data processor. Relevant tasks for a data processor can include data collection and processing through digital questionnaires, transcription, etc. A data processor agreement sets out how the responsibility for personal data should be distributed and safeguarded. VID’s template for data processor agreements is available from the data protection officer: email@example.com.
Requests for access should be sent to the project leader or supervisor, who must respond to the request without undue delay and within a maximum of 30 days.
Disclosure of personal data
Personal data in research and student projects must not be disclosed to third parties. Disclosures of this nature require the approval of VID. Send an email to firstname.lastname@example.org for further information.
Storage of personal data upon completion of the project
As a general rule, personal data should be deleted upon completion of the project. If personal data is to be retained after the project is completed, NSD must be informed of this in the notification form. Data stored after the end of the project is subject to VID’s assessment and approval.