Main Content

What data protection restrictions must I observe?

Personal data means “any information relating to an identified or identifiable natural person (person concerned); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that person”  (Section 46 (1) BDSG, German Data Protection Act). They are subject to strict specifications in their collection, use and disclosure. For archiving, provision and publication, information that can be assigned to a specific or identifiable person should be removed from the research data. Depending on the data, diverse ways of anonymisation are suitable.

If personal data is to be processed, the consent of the data subject must usually be obtained. Among other things, the purpose must be clearly defined, and the party concerned must be able to assess the consequences.

In addition, research data such as company data may contain confidential information (know-how protection), or confidentiality and non-disclosure agreements may have been made that preclude publication.