Âé¶¹ÊÓÆµ

Skip to content Skip to main navigation
MENU

Research data subject to the GDPR

Function

Research

PIB

No

RRSDA Number

2025-003

Department

All University Departments 

Description, purpose and use of records

This series consists of research data containing the personal information of EU residents, subject to the General Data Protection Regulation (GDPR), received, collected, created, and used by Âé¶¹ÊÓÆµfaculty for the purposes of conducting research. 

Authorities

These records are created, used, retained and managed in accordance with the following authorities:

  • General Data Protection Regulation (GDPR)

 

Retention Rationale

Researchers should document decisions regarding the retention of research data in their Research Data Managament Plan and are encouraged to consult GLD-77 Research Data Retention for guidance on establishing appropriate retention periods and retention practices. 

Projects involving human participants that are subject to oversight by the Research Ethics Board (REB) must ensure that data collection, use, storage, access, disclosure, sharing, retention, and disposal complies not only with the EU or UK GDPR, where applicable, but also with all applicable Canadian laws, regulations, and University policies governing human research. This includes, but is not limited to, the requirements set out in Chapter 5 of the Tri-Council Policy Statement: Ethical Conduct for Research Involving Humans (TCPS 2), as well as any conditions imposed by the REB as part of its ethics approval. 

Researchers are encouraged to consult the Office of the Research Ethics to ensure that their data management practices comply with applicable legal, regulatory, ethical, and institutional requirements. 

Status

RRSDA is in force

Approval Date

10 Jul 2026

Last Revised Date

24 Jun 2026