Confidentiality, Security, Retention, Participant Information, Informed Consent, Recruiting Participants, Online and Internet Research, Travel

3 of 15Confidentiality, security and retention of research data
1)Are there any reasons why you cannot guarantee the full security and
confidentiality of any personal or confidential data collected for the study?
Yes /No
While conducting the given research procedure we shall ensure
that full confidentiality of the data will be maintained.
(Personal data should be processed in a way that ensures appropriate
security and confidentiality of the personal data, including for preventing
unauthorised access or use of personal data and the equipment used for
processing. If you are in doubt that you cannot guarantee the full, security and
confidentiality required please contact the IPU for a data protection and
information security assessment.)
2) Is there a significant possibility that any of your participants, and
associated persons, could be directly or indirectly identified in the outputs or
findings from this study?
Yes /no
We have intended to maintain full confidentiality in the report and
due to this reason; the identification of the different respondents
will not be made.
3) is there a significant possibility that a specific organisation or agency or
participants could have confidential information identified, as a result of the
way you write up the results of the study?
Yes No
We have taken various steps to see to it that any confidential
information is not identified. Hence, as a result of the study, no
confidential information can be identified.
4)Will any members of the research team retain any personal of confidential
data at the end of the project, other than in fully anonymised form?
Yes No
When the research will be completed, then the research team will
let go of the confidential information and will not possess any such
information.
(In order to comply with the DPA and GDPR as applicable, personal or
sensitive data can only be kept beyond the purpose if it is in anonymised
form, if not it must be securely destroyed. This will reduce the risk that the
data will become inaccurate, out of date or irrelevant.)

5)Will you or any member of the team intend to make use of any confidential
information, knowledge, trade secrets obtained for any other purpose than the
research project?
Yes No
We intend to maintain full confidentiality of the data and hence, the
trade secrets which have been obtained will be kept privately.
In order to comply with the DPA and GDPR as applicable personal or
sensitive data can be used for a different purpose other than its original as
long as it is for historical or scientific research purposes only. You must
consider the feasibility of anonymising or pseudonymising the data first before
reusing it. If the different purpose is not for historical or scientific research you
cannot rely on existing consent, you will need fresh consent or an alternative
legal basis.
6)Will you be responsible for destroying the data after study completion?
Yes No
Once the study has been completed then in such a case, the data
shall be destroyed by me.
The DPA and GDPR as applicable applies to the way you destroy personal or
sensitive data once your study is completed, and must therefore be securely
disposed of. Speak to IPU and/or ITS for further guidance if unsure how to do
this.
4 of 15Participant Information and Informed Consent
1)Will all the participants be fully informed BEFORE the project begins why
the study is being conducted and what their participation will involve?
Yes No
Yes, all the participants shall be briefed up before the project is
started with and their involvement will be discussed.
In order to comply with the DPA and GDPR as applicable you must be
transparent in informing the participant of the study and their involvement.
This full information needs to be set out in the participant information sheet.

2Will every participant be asked to give written consent to participating in the
study, before it begins?
Yes No
The consent of the different participants will be undertaken orally
and not in writing.
Consent is only valid if it is freely given, specific, informed and unambiguous
indication of the participant’s agreement to the processing of personal or
sensitive data relating to them. This needs to be given before the start of the
study.
3Will all participants be fully informed about what data will be collected, and
what will be done with this data during and after the study?
(consider: who retains it, where and for how long)
Yes No
Yes, all the participants will be fully informed about the manner in
which their data shall be utilised for the research during the study
and after the study has been conducted.
You are required to be transparent and to inform individuals about how long
their data will be retained for, at the point the personal data is obtained, if
that’s not possible, you should outline the criteria used to determine that
period. Also tell the participant whom the data is shared with, and whether it is
within the EEA or outside the EEA. As above if the data is shared with a 3rd
party and/or they are outside of the EEA you must contact the IPU before
sharing, for a data protection and information security assessment.
4Will there be audio, video or photographic recording of participants?
Yes No
The information will be collected from the different participants in
the form of written communication.
You must have the participant's consent after giving them full information
about what data will be collected, what will be done with it, retention, etc. and
process in accordance with the DPA and GDPR as applicable as it is personal
data, and you may even elicit sensitive data intentionally or inadvertently.