Norwegian version of this page

Notifying the processing of personal data

All administrative processing of personal data and bachelor and master thesis and research projects that process personal data shall be notified to the respective data protection officers. 

Administrative processing of personal data

If you have any questions, you can contact the Data Protection Officer for administrative processing at  or data controller at UiO at


More information on when bachelor and master thesis and research projects must be notified, guidance on how to notify and a link to the notification form may be found here:

If you have any questions, you can contact the UiO de facto Data Protection Officer for research (NSD) at or data controller at UiO at

Data Protection Impact Assessment (DPIA)

With the expiry of the Norwegian Data Protection Authority's (DPA) licensing, most of the privacy responsibilities falls on the data controller themselves. This means that, in some cases, one must assess the privacy consequenses (conduct a DPIA) of data processing before you go ahead with the project. Both administrative and research processing of personal data are subject to these new rules.

This page will soon be updated with DPIA templates for both research and administrative processing.

Medical and health research

Are you going to write a bachelor or master thesis or start a research project in the field of medicine and health?

The quality system for medical and health research gives you the information you need about current regulations, guidelines, roles and responsibilities and quality policy (in Norwegian).

Published May 3, 2018 9:00 AM - Last modified Feb. 13, 2019 3:13 PM