The General Data Protection Regulation (GDPR) is also known as the “privacy law.” However, in the context of the GDPR, the term “privacy” encompasses much more than you might expect. Everything related to the proper handling of personal data falls under the GDPR, including, for example, anti-discrimination, freedom of speech, and the protection of democratic values.

This website primarily provides practical information about privacy and the GDPR, intended mainly for individuals (staff, researchers, faculty, and students) affiliated with the REBO and Humanities faculties at Utrecht University. The information provided for the various target groups varies in nature:

All REBO and Humanities staff
General information, including guidance on preventing and reporting data breaches, secure email practices, determining retention periods, cleaning up informal systems, and responding to requests for information.

Teachers and Students
Students who conduct independent academic research as part of their studies (e.g., for a thesis) generally cannot rely on the support of a privacy officer. They should contact their instructor or advisor. To assist both groups, we have developed a booklet that outlines the key points of the GDPR for students conducting research. Additional information is available on this site for the faculty members who supervise them.

Researchers
A roadmap that, through a few simple questions, provides researchers with an overview of the faculty, university, and legal requirements that apply to their research. When it comes to data management, privacy, and ethical review, what do researchers need to consider when undertaking a particular type of research?

Also, there’s a list of frequently asked questions and additional information about data management.

Sources
An overview of the main sources of information for the various target groups.