Scientific research purposes

The content on this page was updated in August 2023. Please note that we will be updating these pages continuously.

Do you consider basing your processing of personal data on the legal basis for scientific research purposes? Here you can read more about:

When you can use scientific research purposes
What options you have when you base your processing on scientific research purposes
Which conditions apply when you base your processing on scientific research purposes

Scientific research purposes a legal basis in the General Data Protection Regulation and the Danish Data Protection Act that gives researchers wide accesses to processing personal data when the processing is exclusively for scientific or statistic purposes.

If, as a researcher, you base your processing on scientific research purposes, you should be aware of the framework that apply.

You should also consider whether it is possible to comply with the information duty. You can read more about the information duty and find templates about information duty here.

Framework and conditions for scientific research purposes

Scope

Personal data may be processed if the processing takes place exclusively for scientific or statistical purposes, and if the processing is necessary for the research.

Please note that scientific research purposes cannot be used as a legal basis for the processing of personal data in an educational context.

Conditions

The processing has to:

take place within a recognised scientific field or for statistical purposes, and
be necessary for the research

Documentation requirements

You may be required to meet and document the information duty.

A template is available to help you meet your information duty in research projects that use 'scientific research purpose' as the legal basis for processing personal data.

Remember to save a copy of the document.

Data subjects’ rights

If your legal basis for processing personal data is 'scientific research purposes', many of your data subjects' rights can be derogated from. They can be derogated from because there are special exemptions for research and because there are special rules that protect the data subjects.

Disclosure of personal data

Special rules apply when a disclosure is based on the legal basis for scientific research purposes.

As a rule, you must collect a declaration of disclosure from the recipient.

However, in three different cases you must obtain a permission from the Danish data protection agency, Datatilsynet, instead:

If you disclose personal data (sensitive or Information on criminal convictions and offences) to a recipient outside the EU/EEA or an international organisation.

If you disclose biological material.

If you disclose personal data (sensitive or Information on criminal convictions and offences) with a view to publishing. Please remember that the personal data must be pseudonymised.

How to refer to the legal basis

Processing of general personal data: Article 6(1)(e) of the General Data Protection Regulation.
Processing of sensitive personal data: Section 10 of the Danish Data Protection Act and article 6(1)(e) of the General Data Protection Regulation.