Taner Kuru, an eLaw alumnus, was awarded the prestigious European Data Protection Law Review ‘Young Scholar Award’ for his paper on the shortcomings in the GDPR for the regulation of genetic testing at the prestigious Computers, Privacy and Data Protection Conference (CPDP).

As a PhD candidate, you work with data. To keep (personal) data as secure as possible, the university has established an information security policy.

In the Netherlands it is now possible to visit non-essential shops if you make an appointment beforehand. But when you book an appointment you have to provide a lot of personal data. Are shops allowed to ask you for all this data and what happens to it?

Research

Research

Gianclaudio Malgieri, Associate Professor at eLaw Leiden, was invited as a speaker at the Annual Conference of the European Academy of Law (ERA), on 21 March in Brussels.

Lecture

There are regulatory policies and recommendations in place, which you should comply with and take into consideration during your research.

Gianclaudio Malgieri, Associate Professor at eLaw – Centre for Law and Digital Technologies at Leiden University, was recently interviewed on the Legal 4 Tech (L4T) podcast. The discussion centred on legal vulnerability in digital platforms, including challenges individuals face in asserting their fundamental…

As a university employee, you probably work with personal data. That is not just names and telephone numbers – it can also include things like cookies. How can you make sure you are working in a privacy-proof way?

While health data is essential for scientific research, that data also needs to be protected. In her doctoral thesis, Irith Kist found a balance between protecting the individual and exchanging health data.

Your options for data storage may vary depending on factors such as size and sensitivity of the data or collaboration with partners outside the university. We are all responsible for data protection. To keep personal data as secure as possible, approved tools should be used to ensure safe processing…

When structured properly, the data are easier to manipulate, analyze and visualize.

Do you have questions about data management? Please contact the data stewards:

Collecting personal and sensitive data is not as common an issue in archaeological research as in some other fields such as sociology and political sciences which is often the reason why archaeologists might not be aware that they are handling those types of data.

On Thursday 29 February, the European Data Protection Supervisor, Wojciech Wiewiórowski, visited the eLaw Center for Law and Digital Technologies at Leiden Law School to give a lecture entitled 'Fundamental rights and/or market surveillance: The current and future role of Data Protection Authorities…

On 3 April 2024, the University L'Orientale in Naples will hold a full afternoon conference to discuss a book written by Dr Gianclaudio Malgieri, Associate Professor at eLaw. The title is 'Vulnerability and Data Protection Law', published with Oxford University Press in April 2023.

In The Hague, the international city of peace, justice, and security, the Faculty of Governance and Global Affairs' bachelor's programmes offer you the opportunity to learn from experts in security and crisis response. Here, you will gain the knowledge and skills to keep people, organisations, and societies…

Any loss of control over stored personal data constitutes a potential data leak. In most cases this concerns stolen (or lost) digital files, but a stolen (or mislaid) printed list containing personal data also represents a data leak. It is important that you report any data leak.

A data processing register is a record of which personal data you process and who you share this data with. If you collect personal data for your research, you must record this in the data processing register.

If you bring in a (new) person who will be processing personal data for you, this person is not allowed to use this information for his or her own purposes. You need to formalise this in a data processing agreement. The university will usually have an agreement in place.

If your research project involves collecting private or otherwise sensitive data, you must ensure adequate data protection measures are taken. Research must be conducted in accordance with the General Data Protection Regulation (GDPR). In terms of patient data, for instance, when used for research carried…

Individuals have the right to instruct the university to delete their personal data in a number of cases. For instance, if the university no longer needs the data, or if the person withdraws consent previously given.

Universities, companies, organisations and societies are increasingly facing enormous quantities of data. It is a great challenge to transform these Big Data into knowledge, which is why Leiden University has launched a University-wide Data Science Research Programme.

Contemporary data management practices rest on the four principles: findability, accessibility, interoperability, and reusability.

As a standard, your workplace comes equipped with a limited amount of disk space. We offer a number of options for extending your disk space. In addition, ISSC can help you recover lost files. You can also securely store your files in the cloud via OneDrive and Teams. Whichever storage you use, be aware…

Firstly, Data Management Plan (DMP) is after all a plan, so you must carry it out!

ICT, Security

Conference

As an employee of Leiden University, you probably work with or come into contact with personal data. The concept of ‘personal data’ is core to the General Data Protection Regulation (GDPR). If you work with personal data, you must be able to explain clearly, comprehensively and in simple language how…

During an evacuation, all employees and students of the Law Faculty gather at the Kamerlingh Onnesgebouw or the Old Observatory.

Doing research in archaeology is more than just gathering data and publishing a paper. Nowadays, there is a growing trend in producing well-defined and responsible data management plans. They help to navigate the process and result in good data management practices which in return benefit the researchers…

Are you handling personal data just once, for instance when taking the minutes of a meeting or organising an employee outing? You do not need to include this use in the data processing register if you stick to the following conditions.

Inaugural lecture