Purpose and summary

From 25 May 2018, the General Data Protection Regulation (GDPR) applies. This means that from this date the same privacy legislation applies in the entire European Union. The Dutch Data Protection Act (Wbp) will no longer apply from this date.

What has changed?

The GDPR ensures amongst other things:

• reinforcement and extension of privacy rights;
• more responsibilities for organisations;
• the same, robust powers for all European privacy supervisors, such as the authority to impose fines of up to €20 million.

The GDPR has significant consequences for the work of researchers as well. This online module and the follow-up session at your university or university of applied sciences will help you to know exactly which changes it entails for your specific type of research, but above all which opportunities the GDPR offers.

Purpose

The purpose of this module is threefold:

• You learn what the GDPR entails;
• You know which aspects of the GDPR are important for your research project;
• You are aware of the steps you can take to comply with the GDPR.

Target group

This module is developed for researchers who are associated with a university or university of applied sciences.

Summary

This online module consists of three sections:

• You will work through three research cases, each with a short quiz to test your current knowledge of the GDPR;
• You will get to know various aspects of the GDPR, such as the DPIA, ‘Privacy by Design’ and the six rules of thumb;
• Using three scenarios, you will learn which criteria determine an important part of the measures within a study.

Duration

The entire module will take approx. 45 minutes.