Personal Data

QMUL Policy

You can read more about collecting personal information here

Personal data is defined in the GDPR as:

"‘personal data’ means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person”.

This means personal data has to be information that relates to an individual. That individual must be identified or identifiable either directly or indirectly from one or more identifiers or from factors specific to the individual.

Some of the personal data you process can be more sensitive in nature and therefore requires a higher level of protection. For example:

  • race;
  • ethnic origin;
  • political opinions;
  • religious or philosophical beliefs;
  • trade union membership;
  • genetic data;
  • biometric data (where this is used for identification purposes);
  • health data;
  • sex life; or
  • sexual orientation.

If you have been granted permission to collect identifiable data you can designate these fields as Identifiers in REDCap. This will give you greater control over who can download and view this data. Access can then be controlled by configuring User Rights.