Processing of personal data in student projects
Are you collecting personal data for your study project?
If you are collecting, registering, processing, or storing personal data in your study project, you must check if this needs to be notified to Sikt (the Norwegian Agency for Shared Services in Education and Research).
Check if you need to report
If you are unsure how to proceed, or if the data is notifiable, see Sikt's FAQ about data protection and notification form.
Notifiable project?
If your project is notifiable, you must notify it to Sikt via their notification form for personal data.
Further questions?
Please contact the Study Administration.
What is the notification requirement and what is considered personal data?
- Notification is mandated by law according to the (Personal Data Act - personopplysningsloven).
- Personal data is information that can directly or indirectly identify a person.
- Directly identifiable personal data includes names, personal identification numbers, or other personal characteristics.
- Indirectly identifiable personal data includes background information that can be traced back to an individual, such as place of residence or institutional affiliation combined with information about age, gender, occupation, nationality, diagnosis, etc.
- If you process such information in your project, the project may be subject to notification to the Data Protection Officer. The notification requirement applies even if the personal data is replaced with a number, code, fictitious names, or similar, which refer to a separate list containing the personal data.
See Guide to data protection in research (Sikt.no).