Search - Leiden University

Privacy and data protection
We are all responsible for data protection. To keep (personal) data as secure as possible, the university has established an information security policy.

General Data Protection Regulation

Data Protection Day: are you keeping personal data safe? Announcement - 30 January 2024
Security

Research using personal data General Data Protection Regulation (GDPR)
If your research project involves collecting private or otherwise sensitive data, you must ensure adequate data protection measures are taken. Research must be conducted in accordance with the General Data Protection Regulation (GDPR). In terms of patient data, for instance, when used for research carried…

Personal data Privacy and data protection
As a university employee, you probably work with personal data. That is not just names and telephone numbers – it can also include things like cookies. How can you make sure you are working in a privacy-proof way?

Data storage IT and research
Your options for data storage may vary depending on factors such as size and sensitivity of the data or collaboration with partners outside the university. We are all responsible for data protection. To keep (personal) data as secure as possible, the university has established an information security…

Data processing register General Data Protection Regulation (GDPR)
A data processing register is a record of which personal data you process and who you share this data with. If you collect personal data for your research, you must record this in the data processing register.

Personal data: privacy and the GDPR
As an employee of Leiden University, you probably work with or come into contact with personal data. The concept of ‘personal data’ is core to the General Data Protection Regulation (GDPR). If you work with personal data, you must be able to explain clearly, comprehensively and in simple language how…

Data processing agreement General Data Protection Regulation (GDPR)
If you bring in a (new) person who will be processing personal data for you, this person is not allowed to use this information for his or her own purposes. You need to formalise this in a data processing agreement. The university will usually have an agreement in place.

One-off data processing General Data Protection Regulation (GDPR)
Are you handling personal data just once, for instance when taking the minutes of a meeting or organising an employee outing? You do not need to include this use in the data processing register if you stick to the following conditions.