GDPR for PhD students

Do you feel overwhelmed by GDPR? Would you like a clearer understanding of how to navigate it, both in your current research project and throughout your future career as a researcher?

Then come join this course.

When:

10 June 2026

10:30 - 15:00

Where:

Campus Emdrup/Copenhagen

Building 7210/A, room A104 

Tuborgvej 164

2400 København NV

Course description

As a researcher, especially at Arts, personal data is often part of research projects – interviews, questionnaires and observations are just a few examples. But how do you handle personal data lawfully and responsibly?

As a researcher, you are responsible for complying with GDPR in your project. Prepare yourself for this task with this 4-hour course, which gives you an overview and a practical introduction to GDPR in research projects, from start to finish.

Did you know, for example, that processing personal data requires a legal basis, and that choosing the wrong basis can affect whether you are allowed to publish your research project, share data with others, or bring data with you to a new position?

No personal data in your project? Sign up anyway. Many discover along the way that they are in fact processing personal data – and even if not, knowledge of GDPR is an important cornerstone of your future research career.

As part of the course, there will be a workshop where you will have the opportunity to put your new knowledge into practice by starting the risk assessment for your own research project and seeking guidance along the way.

Learning outcomes

After the course, you will be able to:

• Identify when you are processing personal data in your research
• Know the central roles and legal bases for processing in data protection
• Conduct a risk assessment and register your research project correctly
• Understand how to fulfil your information obligation and protect participants in your research project
• Know when and how to use GDPR contracts
• Navigate the rules for sharing, reuse and export of data
• Know what should happen to data when your project is completed
• Most importantly, know where and how to get help with GDPR

Course content

• What is personal data?
• Risk assessment
• Registration of research projects
• Data protection roles
• Legal basis for processing of personal data
• Information obligation
• Use of GDPR contracts – when and how
• Use and reuse of data
• Export of data outside the EU/EEA
• Finalising your project

Target group

PhD students at Arts. (Other academic staff at Arts are also welcome to participate.)

Requirements

None

Workload

• Teaching: 4 hours (10:30–15:00 incl. 30 min. lunch break and shorter breaks throughout)
• Preparation: none

Please bring: Laptop (pen and paper optional)

Language

The course is held in English unless all participants are Danish speakers.  

Lecturers

Vickie Kathrine Schmidt Fallesen, GDPR Coordinator, Arts, Aarhus University

Anne Marie Herforth, Legal Advisor, Technology Transfer Office, Aarhus University

Course dates:

• 10 June 2026 10:30 - 15:00