## Summary

When working with personal data you must ensure you are complying with regulatory and ethical guidance. This requires you to have a level of awareness regarding your responsibility as a researcher when handling personal data. It is not expected that you will be a privacy expert but you should think critically when collecting personal data and reach out for further support if necessary.

In this chapter we looked at what a legal ground is for processing personal data and the difference between anonymous and pseudonymous data. The following tasks will demonstrate how this knowledge is applicable in the research process.

If you think your legal ground is not informed consent, contact your privacy champion to discuss this further. The decision to use a legal ground outside of informed consent can only be made with insight from a privacy expert.

#### Task 1:

Thinking of the project you will work on, consider what legal ground will be used when processing personal data. List all the data collected from participants and indicate the legal ground that will be used.

#### Task 2:

**Embedded exercise: select whether the data is anonymous, pseudonymous or directly identifiable. (10 examples)