...
Although there is no general obligation at the university to draw up a data management plan for every study, systematic data management is becoming common practice. It may also be required by funders of the research, such providers of the Horizon 2020, the European Research Council and the Estonian Research Council grants. As the data management plan provides a systematic overview of all the data to be collected and analysed, it is reasonable to compile it at the same time as writing the review of personal data processing and, if necessary, an application to the ethics committee.
See also:
|
2.1.2. Data protection policy
...
Consent-based surveys present many of the data protection conditions on the informed consent form. As the transparency principle requires that data processing information should always be available and easily accessible to individuals, the same information should also be published on the research project’s or the controller’s website (see 2.7).
Read more:
|
2.1.3. Overview of personal data processing
...
A data protection impact assessment is a specific obligation, which does not mean that other types of risk assessment are not necessary. Depending on the situation, a data security or ethical risk assessment may also be necessary (see also 2.14).
2.1.6. Informed consent
Consent is one of the possible legal bases for processing personal data in research. An informed consent sheet must contain the most relevant information on the processing of personal data. Sometimes it is necessary to make several versions of the same information sheet; for example, one for adults and one for children. It may also be necessary to translate the information into different languages.
3 Instead of the term recording of processing activities used in Article 30 of GDPR, the terms personal data processing overview and overview of personal data processing are preferred in Estonia. These have also been used in this guide.
The informed consent form with a person’s consent is an official document that must be appropriately kept. A researcher may need to provide evidence of a data subject’s consent if, for example, the person contests the processing of their data. Also, the ethics committee or funders may request access to the informed consent form to assess its compliance.
...