GDPR: when does it apply to my research?

The General Data Protection Regulation (GDPR) applies:

  • when you (or your institution or organisation) are located in the EAA and you process personal data (e.g. collection, recording, classification, structuring, storage, adaptation or alteration, retrieval, consultation, use, etc.) in the context of scientific research at or affiliated with Ghent University, regardless of the origin of the personal data and where the data is processed;
  • when you (or your institution/organisation) are located outside the EEA, but you process personal data of natural persons in the EEA, when the processing is related to:
    • offering goods or services to these data subjects in the EEA, whether or not a payment is required by the data subjects;
    • monitoring their behavior, insofar as this behavior takes place in the EEA.

More information

More tips

Translated tip

Last modified March 12, 2024, 2:26 p.m.