Are you interested in reading more on this topic? On this page we offer you an overview of additional relevant literature concerning the GDPR with respect to research.

A. Legislative texts

1. Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation). 2016.
Online: https://eur-lex.europa.eu/legal-content/EN/TXT/PDF/?uri=CELEX:32016R0679&from=en

2. Uitvoeringswet Algemene Verordening Gegevensbescherming (UAVG) [General Data Protection Regulation (Implementation) Act]. 2020.
Online: https://wetten.overheid.nl/BWBR0040940/2020-01-01 (in Dutch only)

3. De Nederlandse Grondwet [The Dutch Constitution]. 2018.
Online: 
denederlandsegrondwet.nl/9353000/1/j4nvih7l3kb91rw_j9vvkl1oucfq6v2/vkwrfdbpvatz/f=/web_119406_grondwet_koninkrijk_nl.pdf (in Dutch only)

4. Wet Bescherming Persoonsgegevens [Personal Data Protection Act]. (Expired 25/5/2018).
Online: https://wetten.overheid.nl/BWBR0011468/2018-05-01 (in Dutch only)

5. Charter of Fundamental Rights of the European Union. 2012.
Online: https://eur-lex.europa.eu/legal-content/EN/TXT/PDF/?uri=CELEX:12012P/TXT&from=EN

 

B. Dutch Data Protection Authority (previous names: Data Protection Board (College Bescherming Persoonsgegevens) and Registration Board (Registratiekamer))

1. Beveiliging van persoonsgegevens [Protection of personal data]. G.W. van Blarkom, J.J. Borking. Registration Board. Achtergrondstudies en Verkenningen [Background Studies and Explorations] 23. 2001.
Online: https://autoriteitpersoonsgegevens.nl/sites/default/files/downloads/av/av23.pdf (in Dutch only)

2. Privacy Bij Wetenschappelijk Onderzoek en Statistiek. Kader voor een gedragscode [Privacy in Scientific Research and Statistics. Framework for a code of conduct]. T.F.M. Hooghiemsta. 2002.
Online: autoriteitpersoonsgegevens.nl/sites/default/files/downloads/rapporten/rap_2002_privacy_statistiek.pdf (in Dutch only)

3. CBP Richtsnoeren: Beveiliging van persoonsgegevens [Data Protection Board Guidelines. Protection of personal data]. Government Gazette No. 5174. 2013.
Online: 
autoriteitpersoonsgegevens.nl/sites/default/files/atoms/files/beleidsregels_beveiliging_van_persoonsgegevens.pdf (in Dutch only)

4. Besluit inzake lijst van verwerkingen van persoonsgegevens waarvoor een gegevensbeschermingseffectbeoordeling (DPIA) verplicht is [Decree concerning the list of personal data processing operations for which a data protection impact assessment (DPIA) is mandatory]. Dutch Data Protection Authority. Government Gazette No. 64418. 2019.
Online: https://autoriteitpersoonsgegevens.nl/sites/default/files/atoms/files/stcrt-2019-64418.pdf (in Dutch only)

 

C. European Union Agency for Cybersecurity (ENISA)

1. Privacy and Data Protection by Design. 12 January 2015.
Online: www.enisa.europa.eu/publications/privacy-and-data-protection-by-design

2. Privacy by design in big data. 17 December 2015.
Online: www.enisa.europa.eu/publications/big-data-protection

3. Handbook on Security of Personal Data Processing. 29 January 2018.
Online: www.enisa.europa.eu/publications/handbook-on-security-of-personal-data-processing

4. Recommendations on shaping technology according to GDPR provisions - Exploring the notion of data protection by default. 28 January 2019.
Online: www.enisa.europa.eu/publications/recommendations-on-shaping-technology-according-to-gdpr-provisions-part-2

5. Data Pseudonymisation: Advanced Techniques and Use Cases. 28 January 2021.
Online: www.enisa.europa.eu/publications/data-pseudonymisation-advanced-techniques-and-use-cases

 

D. European Data Protection Supervisor

1. Preliminary Opinion on data protection and scientific research. 2020.
Online: https://edps.europa.eu/sites/edp/files/publication/20-01-06_opinion_research_en.pdf