Notifying the processing of personal data
All administrative processing of personal data and bachelor and master thesis and research projects that process personal data shall be notified to the respective data protection officers.
Administrative processing of personal data
More information on when bachelor and master thesis and research projects must be notified, guidance on how to notify and a link to the notification form may be found here:
- Processing of personal data in research (in Norwegian)
- When should a research project be notified? (nsd.no)
- Technical guidance on notification form (nsd.no)
- Notification form (nsd.no)
Data Protection Impact Assessment (DPIA)
With the expiry of the Norwegian Data Protection Authority's (DPA) licensing, most of the privacy responsibilities falls on the data controller themselves. This means that, in some cases, one must assess the privacy consequenses (conduct a DPIA) of data processing before you go ahead with the project. Both administrative and research processing of personal data are subject to these new rules.
This page will soon be updated with DPIA templates for both research and administrative processing.
Medical and health research
Are you going to write a bachelor or master thesis or start a research project in the field of medicine and health?
The quality system for medical and health research gives you the information you need about current regulations, guidelines, roles and responsibilities and quality policy (in Norwegian).