What is personal data?
In the most basic terms, personal data is any piece of information that someone can use to identify, with some degree of accuracy, a living person. This includes a name, photo, a video recording, and in many cases an audio recording. There is also directly identifiable and indirectly identifiable personal data.
What is sensitive data?
Sensitive data is a specific set of data that must be treated with extra security. This includes information pertaining to ethnic origin, political opinions, religious beliefs, genetic data, and biometric data.
What is GDPR?
The General Data Protection Regulation (GDPR) is a EU law that governs how organizations process personal data. The law has also been implemented in Norway, so all our activities need to comply with GDPR.
Notifying SIKT
The Norwegian Agency for Shared Services in Education and Research (SIKT) is a national archive and center for research data. All student and research projects at UiO that process personal data must be notified to SIKT. Information from UiO on notifying SIKT. SIKT covers the legal aspects of using personal data in research. They will give recommendations for how to best handle whatever your individual project needs are. Some projects are more complicated than others so be sure to notify well in advance as it could take over a month to get approval.
Privacy checklist
- Identify if you will collect personal and/or sensitive data. This will inform the rest of your decisions.
- Create a DMP and notify SIKT
- Follow UiO's storage guidelines