Skip to main content
Research

Research and personal data

Teesside University Privacy Notice for Research

The University is Data Controller and Data Processor of various data, including personal data and special category data which it processes for the purposes of research carried out by the University both by students and academics. Where the University obtains data directly for the purposes of research (Primary Data Collection) such data will normally be obtained with express consent of data subjects to process their data for research purposes, and consent will be the lawful basis for processing data. If personal data is not collected expressly for research purposes, processing data for research purposes is regarded as compatible with the purpose for which data is collected, and public interest will be the basis for processing data.

Where the University obtains data indirectly from a third party (Secondary Data Collection) processing will be carried out in the public interest.

Special category data either obtained for the purposes of research or personal data including special category data which has been obtained for other purposes is processed lawfully in the necessary performance of scientific or historical research or for statistical purposes carried out in the public interest. Where special category data is processed, the University ensures that the processing is proportionate to the aims pursued, respects the essence of data protection and provides suitable and specific measures to safeguard the rights and interests of the data subject in full compliance with the General Data Protection Regulation and the Data Protection Act 2018. This applies where the University collects data both as Primary and Secondary Data Collection.

Data used for research purposes may be processed in any of the following ways:

  • Collecting
  • Recording
  • Organising
  • Structuring
  • Storing
  • Adapting
  • Altering
  • Retrieving
  • Consulting
  • Using
  • Disclosing
  • Transmitting
  • Disseminating
  • Making available
  • Aligning
  • Combining
  • Restricting
  • Erasing
  • Destroying

Data held for research purposes may be transferred between departments in the University. Data will not be transferred to third parties other than in the context of any particular research project, or for other research projects. Where transfers to third parties are made, the University will ensure that the third party has the same safeguards in place to protect the integrity of the data transferred. The University may hold Data for research purposes indefinitely.

Principles for use of personal data in research

  • Where possible, research projects will work with fully anonymised data;
  • When anonymised data has been obtained initially as identifiable personal data, research projects will anonymise data as quickly as possible to render the data anonymised;
  • If working with fully anonymised data is not possible or would render the purposes of the research invalid, then research projects will work with pseudonymised data that has been anonymised whilst retaining a key permitting re-identification within strictly controlled conditions and by strictly defined persons involved with the research. The key permitting re-identification must be kept separately from the data and any other documents relating to the person from whom the data was obtained;
  • If working with pseudonymised data is not possible or would render the purposes of the research invalid, then research projects will work with the minimal amount of personal data as is strictly necessary in order that the research purpose will be achievable;
  • Individuals from whom personal data is obtained will be informed that the basis upon which their personal data is being processed is for research and that the legal basis for processing their personal data for research is as a task carried out in the public interest;
  • Where personal data is collected from individuals, they will also be informed about the uses to which their personal data will be put within a research project and their rights with respect to their personal data; whether, how and when their personal data will be anonymised or pseudonymised; and the right to withdraw personal data will be specified; and the time period in which withdrawal is possible will be made clear to them;
  • When specifying data withdrawal rights to individuals from whom personal data is obtained for research purposes, it will be made clear to them that they are providing consent to participate in the research and consent for their data to be used for the purpose of research but that the legal basis on which their personal data will be processed is that of a task carried out in the public interest.
 

Latest news

International partnership signed with prestigious American ... International partnership signed with prestigious American ...
More news

Research events

More events