1. Data Protection and research Rachael Maguire Records Manager

2.  Does your research include personal data?  If yes, data protection matters  How to collect personal data  How to store personal data  How to dispose of personal data Data Protection and research

3.  Covers personal information about a living individual  8 data protection principles  Subject access requests  Requests to correct/delete information  Sensitive personal data Data Protection Act

4. 1. Fairly and lawfully processed 2. Processed for specified purpose(s) 3. Adequate, relevant and not excessive 4. Accurate and kept up to date 5. Not kept longer than necessary 6. Processed in line with data subjects rights 7. Secure 8. Not transferred to countries without adequate protection The Data Protection principles

5.  Forms  Only collect necessary information  Ask do you need it for a particular purpose or is it nice to have  Privacy notice  Informs the individual what will be done with info  Allows for consent for processing  Particularly important for the sensitive personal data – need explicit consent to process How to collect data

6.  Security important  Who has access  Where is it stored  Using data processors  Encrypt or at least password protect in transit How to store data

7.  Does research funder require data to be deposited and where? In what form?  How long will you need data for?  If destroying:  Paper based – use the School’s confidential waste service  Electronic based – ensure properly deleted and How to dispose of data

8.  Letter arrived from ICO re project funded by government department  Who was data controller/data processor  On investigation, researcher had more or less complied  Some tightening up needed Example

9.  On School website now  Also check out guidance on information security  E.g. encryption Data Protection policy

10.  Further information can be found on the ICO website: www.ico.gov.uk and JISC Legal http://www.jisclegal.ac.uk/LegalAreas/DataProtection.aspx www.ico.gov.uk http://www.jisclegal.ac.uk/LegalAreas/DataProtection.aspx  Any questions? Questions?