Personal data in research

Personal data are always confidential. Anyone who works with personal data is responsible for protecting them.

The document below is intended as practical guidance for handling personal data in scientific research. It is not an exhaustive overview, but it will guide you through the main points of attention regarding privacy and personal data. Definitions of used terms can be found on this page. Always use the document below when you process personal data for your research project.

Appropriate use of personal data in scientific research according to the GDPR

When conducting scientific research, personal data may be processed. This can, for example, be data from persons who complete surveys or participate in a research, but it can also be data from social media or tracking data. This document is intended to help researchers determine what they should pay attention to under the General Data Protection Regulation (GDPR).


All processing of personal data must be registered in the register of processing. This processing operation can be registered via the button below. The DPO will review the registration and may ask you some questions. 

Your privacy contact person can assist you with the registration.

Processing can be registered using the tool
GDPR Register


The UT offers the course 'Handling Personal Data in Research". This course, which is open to every UT staff member, will help you understand the range of perspectives needed to build and demonstrate compliance with privacy regulation in research. Therefore, this e-learning material supports an active learning approach. You will be stimulated to reflect on the knowledge and competencies you need to fulfil your role as a professional. After completion of this course, you will be able to ask the right questions regarding the risks and measures to safeguard the rights of participants in a research project.

To be a responsible researcher requires an active approach to data protection. In this course you follow a student who learns with a multi-disciplinary group of friends WHY and HOW to use the European General Data Protection Regulation (GDPR) in research.

Register for the course 'Handling personal data in research'
Canvas course 'Handling personal data in research'

As you will notice, especially in video's, all material has been developed at the University of Groningen. The University of Twente uses this course with the permission of the University of Groningen.

Other questions