General Data Protection Regulation (GDPR) - teach and supervise

Step 2 - Define the purpose of the processing and what information must be collected

Before the practical work begins, it is important to identify what information is to be collected and why. For those who are doing a degree project this is not a difficult task. The purpose of the processing is simply to be able to carry out the study necessary to substantiate your work. It is, however, important that you think this through and formulate the purpose as well as you are aware of what information is necessary to achieve it.

Plan the work

In order to meet the requirements of the General Data Protection Regulation, it is necessary to be quite clear from the start of the purpose of the work and to know what information is necessary to fulfill it. The regulation requires transparency in relation to the data subject and that he or she is informed, when collecting information about the purpose of the processing and what information to be collected. It is necessary to formulate the purpose early and identify the information to be used. This part of the work must be documented in writing and presented upon request.