WEBVTT 00:00:00.000 --> 00:00:10.520 align:middle line:90% 00:00:10.520 --> 00:00:11.383 align:middle line:90% Hi. 00:00:11.383 --> 00:00:12.110 align:middle line:90% Hi. 00:00:12.110 --> 00:00:13.800 align:middle line:90% Oh, it's good to find you. 00:00:13.800 --> 00:00:14.300 align:middle line:90% All right. 00:00:14.300 --> 00:00:16.400 align:middle line:84% So Agata, here, works with our Open Science 00:00:16.400 --> 00:00:17.600 align:middle line:90% group in our library. 00:00:17.600 --> 00:00:19.575 align:middle line:84% And we're going to talk about privacy, 00:00:19.575 --> 00:00:21.200 align:middle line:84% which is super important, because we're 00:00:21.200 --> 00:00:23.150 align:middle line:90% doing human subjects research. 00:00:23.150 --> 00:00:26.420 align:middle line:84% But first, let's take a step back, what's privacy? 00:00:26.420 --> 00:00:32.960 align:middle line:84% Well privacy is protecting the personal information 00:00:32.960 --> 00:00:34.880 align:middle line:90% of human subjects. 00:00:34.880 --> 00:00:38.300 align:middle line:84% Every living person, me or you, we 00:00:38.300 --> 00:00:41.310 align:middle line:84% have-- there are certain types of information about us 00:00:41.310 --> 00:00:45.180 align:middle line:84% that can lead to identify us as people. 00:00:45.180 --> 00:00:48.920 align:middle line:84% So for example my name, or where I live, or how I look. 00:00:48.920 --> 00:00:52.670 align:middle line:84% All that is personal information about me, that can identify me. 00:00:52.670 --> 00:00:56.390 align:middle line:84% So we want to protect the privacy of our research 00:00:56.390 --> 00:01:00.110 align:middle line:84% subjects by protecting all the personal information about them 00:01:00.110 --> 00:01:01.760 align:middle line:90% that we might collect. 00:01:01.760 --> 00:01:03.010 align:middle line:90% That makes sense. 00:01:03.010 --> 00:01:06.650 align:middle line:84% So just like we talked about with our data lifecycle before, 00:01:06.650 --> 00:01:09.890 align:middle line:84% we have personal information in that. 00:01:09.890 --> 00:01:13.430 align:middle line:84% OK, but what are their words other than personal information 00:01:13.430 --> 00:01:15.140 align:middle line:84% are important to understand, when 00:01:15.140 --> 00:01:16.860 align:middle line:90% you're talking about privacy? 00:01:16.860 --> 00:01:19.010 align:middle line:84% So personal information is definitely 00:01:19.010 --> 00:01:25.470 align:middle line:84% this most critical term, in all privacy issues in research. 00:01:25.470 --> 00:01:27.080 align:middle line:84% So personal information, as I said 00:01:27.080 --> 00:01:29.750 align:middle line:84% is, any bit of information that can lead 00:01:29.750 --> 00:01:32.750 align:middle line:90% to identifying you as a person. 00:01:32.750 --> 00:01:36.090 align:middle line:84% But also there are different types of personal information. 00:01:36.090 --> 00:01:39.620 align:middle line:84% So there is general personal information, like for example, 00:01:39.620 --> 00:01:43.040 align:middle line:90% my name or my address. 00:01:43.040 --> 00:01:45.920 align:middle line:84% But there are also these special types 00:01:45.920 --> 00:01:49.580 align:middle line:84% of personal information, that might be 00:01:49.580 --> 00:01:51.830 align:middle line:90% sensitive information about me. 00:01:51.830 --> 00:01:55.490 align:middle line:84% Like for example, information about my health conditions, 00:01:55.490 --> 00:02:00.540 align:middle line:84% or biometric information, like my fingerprint for example. 00:02:00.540 --> 00:02:03.260 align:middle line:84% So this sensitive information-- that 00:02:03.260 --> 00:02:08.990 align:middle line:84% may require us to be extra careful when processing it, as 00:02:08.990 --> 00:02:12.230 align:middle line:84% opposed to just general personal information. 00:02:12.230 --> 00:02:15.680 align:middle line:84% OK so general personal information, would be say, 00:02:15.680 --> 00:02:17.100 align:middle line:90% my face in a video-- 00:02:17.100 --> 00:02:17.600 align:middle line:90% For example. 00:02:17.600 --> 00:02:18.900 align:middle line:90% --in one of our data sets. 00:02:18.900 --> 00:02:20.720 align:middle line:84% And then if something is sensitive, 00:02:20.720 --> 00:02:24.200 align:middle line:84% it might be anything captured from a sensor 00:02:24.200 --> 00:02:27.440 align:middle line:90% about my heart rate or-- 00:02:27.440 --> 00:02:30.935 align:middle line:84% anything that maybe is a little unique in a survey. 00:02:30.935 --> 00:02:33.110 align:middle line:84% Right so anything that can reveal 00:02:33.110 --> 00:02:37.520 align:middle line:84% any particular information about, for example your health, 00:02:37.520 --> 00:02:39.650 align:middle line:84% but also other types of information. 00:02:39.650 --> 00:02:42.740 align:middle line:84% For example, here in the European Union 00:02:42.740 --> 00:02:48.170 align:middle line:84% we consider also your ethnicity, or your racial or political 00:02:48.170 --> 00:02:50.570 align:middle line:84% views, for example, or religious views, 00:02:50.570 --> 00:02:52.550 align:middle line:90% as sensitive information. 00:02:52.550 --> 00:02:55.360 align:middle line:84% Or your sexual orientation can be also sensitive information. 00:02:55.360 --> 00:02:57.110 align:middle line:84% So there are different bits of information 00:02:57.110 --> 00:02:59.750 align:middle line:84% about you that can be considered sensitive, 00:02:59.750 --> 00:03:02.120 align:middle line:90% and in the special category. 00:03:02.120 --> 00:03:04.410 align:middle line:84% OK so this is really a safety issue. 00:03:04.410 --> 00:03:04.910 align:middle line:90% Yes. 00:03:04.910 --> 00:03:07.190 align:middle line:84% And then how, as a researcher, do I 00:03:07.190 --> 00:03:09.110 align:middle line:84% make sure that my research subjects 00:03:09.110 --> 00:03:13.160 align:middle line:84% feel safe and understood when I'm doing research? 00:03:13.160 --> 00:03:14.880 align:middle line:90% Right that's so important. 00:03:14.880 --> 00:03:18.590 align:middle line:84% So our legal basis for processing-- 00:03:18.590 --> 00:03:20.780 align:middle line:84% collecting and processing personal information 00:03:20.780 --> 00:03:24.210 align:middle line:84% from our research subjects is consent. 00:03:24.210 --> 00:03:27.210 align:middle line:84% So we collect consent from our research subjects. 00:03:27.210 --> 00:03:29.990 align:middle line:84% And this consent needs to be voluntary, 00:03:29.990 --> 00:03:32.760 align:middle line:84% so we cannot force them to do anything. 00:03:32.760 --> 00:03:34.730 align:middle line:84% And it needs to be informed, so they 00:03:34.730 --> 00:03:36.950 align:middle line:84% need to know what they're signing up for. 00:03:36.950 --> 00:03:39.860 align:middle line:84% They need to get sufficient information about the research 00:03:39.860 --> 00:03:43.010 align:middle line:84% project, that they will be participating in. 00:03:43.010 --> 00:03:47.750 align:middle line:84% And most importantly, we need to have documented consent. 00:03:47.750 --> 00:03:51.680 align:middle line:84% So we need to have proof that our research subject consented 00:03:51.680 --> 00:03:53.400 align:middle line:84% to participating in this research. 00:03:53.400 --> 00:03:56.357 align:middle line:84% So it's not enough to just ask them, hey, 00:03:56.357 --> 00:03:58.190 align:middle line:84% do you want to participate in this research. 00:03:58.190 --> 00:04:00.110 align:middle line:84% And they will say, yeah sure, but we 00:04:00.110 --> 00:04:02.120 align:middle line:90% don't have it on the record. 00:04:02.120 --> 00:04:05.000 align:middle line:84% They need to sign a formal consent form, 00:04:05.000 --> 00:04:06.470 align:middle line:84% and document where they're saying, 00:04:06.470 --> 00:04:08.390 align:middle line:84% I agree to participate in this research. 00:04:08.390 --> 00:04:10.580 align:middle line:84% Or we need to have, for example, a video recording 00:04:10.580 --> 00:04:15.620 align:middle line:84% of them saying it, so that we have a documented consent. 00:04:15.620 --> 00:04:18.660 align:middle line:84% That sounds a lot like the terms I used on my phone, right? 00:04:18.660 --> 00:04:19.160 align:middle line:90% Yeah. 00:04:19.160 --> 00:04:20.180 align:middle line:90% That makes sense. 00:04:20.180 --> 00:04:23.750 align:middle line:84% Of course, so some data protection regulations 00:04:23.750 --> 00:04:27.140 align:middle line:84% apply of course, to not only to research, but also 00:04:27.140 --> 00:04:29.540 align:middle line:90% to other areas where-- 00:04:29.540 --> 00:04:32.210 align:middle line:84% of life, and of digital life right now, 00:04:32.210 --> 00:04:34.070 align:middle line:90% where we collect data. 00:04:34.070 --> 00:04:35.300 align:middle line:90% Absolutely. 00:04:35.300 --> 00:04:39.283 align:middle line:84% All right so I need to make sure I know what kind of information 00:04:39.283 --> 00:04:39.950 align:middle line:90% I'm collecting-- 00:04:39.950 --> 00:04:40.580 align:middle line:90% Right. 00:04:40.580 --> 00:04:44.600 align:middle line:84% --and then I need to make sure I inform people that are coming, 00:04:44.600 --> 00:04:49.660 align:middle line:84% and then I need to make sure I get consent in the right way. 00:04:49.660 --> 00:04:52.850 align:middle line:84% How do I get help with this whole process? 00:04:52.850 --> 00:04:56.520 align:middle line:84% Right so it might all sound a little bit daunting. 00:04:56.520 --> 00:04:59.510 align:middle line:84% And sometimes it also sounds scary to hear about things 00:04:59.510 --> 00:05:04.160 align:middle line:84% like, oh privacy, oh we need to be careful, oh data protection. 00:05:04.160 --> 00:05:08.030 align:middle line:84% All these things of course, as a researcher or a student, 00:05:08.030 --> 00:05:10.540 align:middle line:84% maybe you don't have full knowledge 00:05:10.540 --> 00:05:13.450 align:middle line:84% about all these regulations around that. 00:05:13.450 --> 00:05:16.630 align:middle line:84% So sometimes I would suggest to you, 00:05:16.630 --> 00:05:20.680 align:middle line:84% first of all go to either your direct advisor or the person 00:05:20.680 --> 00:05:23.050 align:middle line:84% that is leading the project that you're working on, 00:05:23.050 --> 00:05:25.180 align:middle line:90% where you're collecting data. 00:05:25.180 --> 00:05:28.150 align:middle line:84% But there is also other help for example. 00:05:28.150 --> 00:05:29.890 align:middle line:84% I work in the open research group 00:05:29.890 --> 00:05:33.130 align:middle line:90% here at the university library. 00:05:33.130 --> 00:05:36.100 align:middle line:84% And we have a whole team of research data experts 00:05:36.100 --> 00:05:41.140 align:middle line:84% that can help with answering questions about-- 00:05:41.140 --> 00:05:44.110 align:middle line:84% am I following the right procedures here? 00:05:44.110 --> 00:05:46.690 align:middle line:84% Is my consent form correct for collecting 00:05:46.690 --> 00:05:48.430 align:middle line:90% this particular type of data? 00:05:48.430 --> 00:05:51.310 align:middle line:84% But we also work together with lawyers 00:05:51.310 --> 00:05:56.260 align:middle line:84% that help us when very particular legal issues arise 00:05:56.260 --> 00:05:59.410 align:middle line:84% around collecting personal information from the research 00:05:59.410 --> 00:05:59.930 align:middle line:90% subject. 00:05:59.930 --> 00:06:04.600 align:middle line:84% So we can also get advice from them on that. 00:06:04.600 --> 00:06:07.690 align:middle line:84% OK so just like how I'm planning everything else, 00:06:07.690 --> 00:06:10.720 align:middle line:84% crafting my research questions and my project, 00:06:10.720 --> 00:06:13.280 align:middle line:84% I should plan in a lot of time in advance. 00:06:13.280 --> 00:06:15.880 align:middle line:84% We're doing research because I might 00:06:15.880 --> 00:06:19.870 align:middle line:84% have to go and ask questions to different legal entities, 00:06:19.870 --> 00:06:22.540 align:middle line:84% or make sure I have all of this set. 00:06:22.540 --> 00:06:24.550 align:middle line:84% Right and also remember that, of course 00:06:24.550 --> 00:06:28.240 align:middle line:84% if you do not collect any particular types 00:06:28.240 --> 00:06:32.650 align:middle line:84% of personal data or any particular very sensitive 00:06:32.650 --> 00:06:35.200 align:middle line:84% personal data, then you will probably not 00:06:35.200 --> 00:06:37.030 align:middle line:84% have to consult with-- for example 00:06:37.030 --> 00:06:39.520 align:middle line:90% legal entities or lawyers. 00:06:39.520 --> 00:06:42.600 align:middle line:84% But of course, preparing the format 00:06:42.600 --> 00:06:45.100 align:middle line:84% of the consent forms, preparing all the information that you 00:06:45.100 --> 00:06:47.380 align:middle line:84% will give to your research subject 00:06:47.380 --> 00:06:51.310 align:middle line:84% for collecting that data, does take time. 00:06:51.310 --> 00:06:53.240 align:middle line:84% And you need to prepare for that. 00:06:53.240 --> 00:06:56.320 align:middle line:84% And then lastly, remember that if you actually 00:06:56.320 --> 00:06:59.260 align:middle line:84% do not collect any personal information, 00:06:59.260 --> 00:07:01.720 align:middle line:84% then you don't really need to worry about all that. 00:07:01.720 --> 00:07:05.380 align:middle line:84% And sometimes there are projects where we do not really 00:07:05.380 --> 00:07:08.320 align:middle line:84% collect-- we collect all the data completely anonymously. 00:07:08.320 --> 00:07:11.740 align:middle line:84% And then we don't need to worry about all the privacy and data 00:07:11.740 --> 00:07:13.010 align:middle line:90% protection issues. 00:07:13.010 --> 00:07:16.330 align:middle line:84% And then finally, if you do collect personal data, 00:07:16.330 --> 00:07:18.880 align:middle line:84% you can always anonymize the data. 00:07:18.880 --> 00:07:21.010 align:middle line:84% Once it's collected, and you want 00:07:21.010 --> 00:07:24.460 align:middle line:84% to work with the data in a safe way, 00:07:24.460 --> 00:07:27.160 align:middle line:84% you can just remove all the personal information 00:07:27.160 --> 00:07:31.030 align:middle line:84% from your data, and then work on anonymous data. 00:07:31.030 --> 00:07:33.110 align:middle line:90% Wow, that's a lot to consider. 00:07:33.110 --> 00:07:35.230 align:middle line:84% But it sounds like there's help available-- 00:07:35.230 --> 00:07:35.800 align:middle line:90% Absolutely. 00:07:35.800 --> 00:07:37.960 align:middle line:90% --and every project is unique. 00:07:37.960 --> 00:07:40.210 align:middle line:84% But this is something we should definitely think about 00:07:40.210 --> 00:07:41.595 align:middle line:90% in our project planning phase. 00:07:41.595 --> 00:07:42.280 align:middle line:90% Yes. 00:07:42.280 --> 00:07:43.820 align:middle line:84% All right, thank you for your help. 00:07:43.820 --> 00:07:45.433 align:middle line:90% Of course, no problem. 00:07:45.433 --> 00:07:46.300 align:middle line:90% See you later. 00:07:46.300 --> 00:07:48.180 align:middle line:90% Bye, thank you. 00:07:48.180 --> 00:07:56.000 align:middle line:90%