Member-only content is available on this page. Please log in to view this content.
General Data Protection Regulation
The General Data Protection Regulation (GDPR) regulates the collection and processing of personal data from individuals living in the European Union. Its provisions have far-reaching impact on researchers and their organisations.
Why does the GDPR matter?
The General Data Protection Regulation, adopted in 2016, applies to any type of scientific research that uses personal data, such as studies in (bio)medicine, the social sciences, and the arts and humanities. It affects EU researchers who need to be able to collect, process, and re-process personal data and collaborate internationally. It also affects research funding and performing organisations that want to establish international collaborations with other organisations.
The challenges for research organisations
Unfortunately, the GDPR legislation creates numerous challenges for research:
- Fragmented legal landscape due to incoherence in national rules complicates cross-border collaboration
- Provisions on joint or separate controllership leave room for interpretation and makes it difficult for research organisations and their partners to identify the correct approach
- Explanations on the correct legal form to use for agreements are often not applicable for public organisations
- Many ‘tools’ such as Standard Contractual Clauses (SCCs) or adequacy decisions are not applicable to public organisations
- Non-EU partners are reluctant to sign agreements on data protection due to lack of knowledge of the rules and implications
First steps towards solutions
Since the adoption of the legislation and the identification of the problems, Science Europe is pleased to report some remedial measures have been introduced:
- The European Data Protection Board (EDPB) Guidelines address a number of the challenges such as definition of joint or separate controllership
- A recent European Commission report reviews the implementation of the GDPR and foresees that the institution takes action to address a number of challenges such as updating the SCCs.
Member-only content is available on this page. Please log in to view this content
Member-only content is available on this page. Please log in to view this content
Related content
08.02.2024
Science Europe Feedback on the implementation of the GDPR
Science Europe has provided feedback to the European Commission on the implementation of the General Data Protection Regulation (GDPR) through the call for evidence opened for the 2025 GDPR report.
16.10.2020
Response to the EDPB Consultation on the concepts of controller and processor in the GDPR
In its response to the European Data Protection Board (EDPB) Science Europe welcomes the detailed guidance on identifying whether controllership is joint or separate within a given collaboration and identifying an appropriate legal form to establish an agreement. However further clarification through the EDPB Guidelines would be helpful for public research organisations.
30.09.2016
Joint Statement on Implementing the General Data Protection Regulation to Maintain a Competitive Environment for Research in Europe: Position of Research and Patient Organisations
This joint statement on the implementation of the Data Protection Regulation (DPR), facilitated by Science Europe and Wellcome and released by the wider research community, highlights the crucial role Member States must now play in its implementation by reviewing and amending their current laws to enable research to take place.
08.05.2013
Position Statement on the Proposed European General Data Protection Regulation
The European Institutions are currently entering the crucial stage of the legislative process that will revise the EU Data Protection Directive and lead to the European General Data Protection Regulation (DPR). Scientific research produces high impact results, depending heavily on access to and use of datasets that include personal data. In order to continue to perform scientific research for the benefit of Europe and its citizens, researchers need an appropriate DPR that reconciles the safe processing of personal data for scientific research and the protection of individual rights to privacy
MORE?