Why and how we should care about the General Data Protection Regulation
Why and how we should care about the General Data Protection Regulation
复制标题
DOI：
10.1080/08870446.2019.1606222
复制
发表时间：
2019-05-18
影响因子：
3.3
通讯作者：
Mondschein, Christopher
中科院分区：
文献类型：
--
作者：
Crutzen, Rik;Peters, Gjalt-Jorn Ygram;Mondschein, Christopher
《通用数据保护条例》（GDPR）是欧盟范围内新的数据保护法，这是朝着更全面、更深远地保护个人个人数据迈出的一大步。在这篇社论中，我们描述了作为健康心理学领域的研究人员我们应该关心 GDPR 的原因和方式。在第一部分中，我们解释 GDPR 何时适用、谁负责数据保护以及个人数据和处理的概念涵盖哪些内容。在第二部分中，我们解释了 GDPR 中与健康心理学领域的研究人员相关的方面（例如，获得知情同意、数据最小化和开放科学）。我们关注研究人员在日常实践中可能会问自己的问题。遵守 GDPR 要求采用尚未普遍使用但服务于保护研究参与者个人数据的基本权利的研究实践（例如数据最小化和匿名程序）。
The General Data Protection Regulation (GDPR) is the new European Union-wide (EU) law on data protection, which is a great step towards more comprehensive and more far-reaching protection of individuals' personal data. In this editorial, we describe why and how we - as researchers within the field of health psychology - should care about the GDPR. In the first part, we explain when the GDPR is applicable, who is accountable for data protection, and what is covered by the notions of personal data and processing. In the second part, we explain aspects of the GDPR that are relevant for researchers within the field of health psychology (e.g., obtaining informed consent, data minimisation, and open science). We focus on questions that researchers may ask themselves in their daily practice. Compliance with the GDPR requires adopting research practices (e.g., data minimisation and anonymization procedures) that are not yet commonly used, but serve the fundamental right to protection of personal data of study participants.