\n
\n\n
\n
\n
\n\n
\n\n
[et_pb_section fb_built=”1″ _builder_version=”4.27.4″ _module_preset=”default” locked=”off” global_colors_info=”{}”][et_pb_row column_structure=”1_2,1_2″ _builder_version=”4.27.4″ _module_preset=”default” custom_padding=”||0px|||” locked=”off” global_colors_info=”{}”][et_pb_column type=”1_2″ _builder_version=”4.27.4″ _module_preset=”default” global_colors_info=”{}”][et_pb_heading title=”Excursus: Legal aspects in RDM” _builder_version=”4.27.4″ _module_preset=”default” locked=”off” global_colors_info=”{}”][\/et_pb_heading][\/et_pb_column][et_pb_column type=”1_2″ _builder_version=”4.27.4″ _module_preset=”default” global_colors_info=”{}”][\/et_pb_column][\/et_pb_row][et_pb_row column_structure=”3_5,2_5″ _builder_version=”4.27.4″ _module_preset=”default” min_height=”1843px” locked=”off” global_colors_info=”{}”][et_pb_column type=”3_5″ _builder_version=”4.27.4″ _module_preset=”default” global_colors_info=”{}”][et_pb_text _builder_version=”4.27.4″ _module_preset=”default” width=”100%” custom_padding=”|0px|0px|||” locked=”off” global_colors_info=”{}”]<\/p>\n
Various legal aspects are relevant in research data management (RDM) in order to strike a balance between the interests involved. Key legal issues include data protection law and compliance with copyright and labor law regulations.<\/p>\n
From a data protection perspective, it should be clarified at an early stage whether research data is personal and under what conditions it may be collected, processed, or published. Necessary measures such as anonymization<\/a>, pseudonymization<\/a>, confidentiality, and data security must be examined. Compliance with subject-specific legal and ethical requirements in data collection is particularly important in fields such as healthcare and social sciences. In the health sciences, particularly strict data protection requirements apply due to the high sensitivity of the data. The GDPR stipulates that patient data may only be collected and processed on a clear legal basis, which usually requires the explicit consent of the persons concerned. Researchers are also obliged to ensure a high level of data security and to store data only for as long as necessary. In addition, maintaining confidentiality is essential to ensure privacy protection through secure data handling and storage. Legal requirements are also paramount in the social sciences, which include compliance with data protection regulations, especially when collecting sensitive information such as political opinions, sexual orientation, or religious affiliation (Art. 9 GDPR).<\/p>\n In addition to data protection, it is crucial to determine who decides on the handling and publication of research data. Usually, this decision lies with the person to whom the data is assigned, based on copyright, employment contract, or patent law. However, the decision-making authority is not regulated solely by legal requirements, but is largely in the hands of the parties involved. It is advisable to make agreements in advance and to lay down general guidelines in statutes on good scientific practice<\/a> or research data guidelines\/policies<\/a>. These should specify who has which rights of use and whether there are any restrictions, e.g., through confidentiality agreements. [2]<\/p>\n<\/div>\n [\/et_pb_text][\/et_pb_column][et_pb_column type=”2_5″ _builder_version=”4.27.4″ _module_preset=”default” global_colors_info=”{}”][et_pb_video src=”https:\/\/youtu.be\/XRdQH_QeQCk?si=gEOlUYq4pPUTD9JD” _builder_version=”4.27.4″ _module_preset=”default” custom_margin=”||35px||false|false” global_colors_info=”{}”][\/et_pb_video][et_pb_text _builder_version=”4.27.6″ _module_preset=”default” text_text_color=”#000000″ header_3_text_align=”center” header_3_text_color=”#313191″ custom_margin=”0px|0px|35px|0px|false|false” custom_padding=”10px|10px|10px|10px|false|false” link_option_url_new_window=”on” hover_enabled=”0″ border_radii=”on|5px|5px|5px|5px” border_width_all=”5px” border_color_all=”#313191″ locked=”off” global_colors_info=”{}” sticky_enabled=”0″]<\/p>\n In order to limit the processing of personal data to what is necessary, the principle of data minimization should be applied and only data that is necessary for a specific purpose should be collected. In addition, data collection must be proportionate to the purpose pursued. The key here is to answer two control questions: Is the collection of data actually necessary to achieve the intended purpose? And: Can this purpose not be achieved by other means in a reasonable manner?<\/p>\n<\/div>\n<\/div>\n<\/section>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/section>\n<\/div>\n<\/div>\n<\/div>\n [\/et_pb_text][et_pb_text _builder_version=”4.27.4″ _module_preset=”default” header_3_text_align=”center” header_3_text_color=”#8D2757″ min_height=”270px” custom_margin=”3px||0px||false|false” custom_padding=”10px|10px|10px|10px|false|false” border_radii=”on|5px|5px|5px|5px” border_width_all=”5px” border_color_all=”#722A69″ locked=”off” global_colors_info=”{}”]<\/p>\n In order to ensure compliance with legal requirements, it is advisable to coordinate information materials, such as data protection declarations and consent forms, as well as procedures, closely with the data protection officers at your own university. These materials serve to provide data subjects with comprehensive information about the processing of their data, including protective measures and their rights.<\/p>\n<\/div>\n<\/div>\n<\/section>\n<\/div>\n<\/div>\n<\/div>\n [\/et_pb_text][et_pb_text _builder_version=”4.27.4″ _module_preset=”default” header_3_text_align=”center” header_3_text_color=”#E81C27″ custom_margin=”35px||||false|false” custom_padding=”10px|10px|10px|10px|false|false” border_radii=”on|5px|5px|5px|5px” border_width_all=”5px” border_color_all=”#E81C27″ locked=”off” global_colors_info=”{}” min_height=”320.8px”]<\/p>\n Researchers are bound by data protection rules when handling personal data. These include the European Union’s General Data Protection Regulation (GDPR), the Federal Data Protection Act (BDSG), and the respective state data protection laws. State universities in particular are subject to the respective state data protection law. These measures ensure that research work not only meets the legal requirements of the GDPR and national data protection law, but also complies with ethical principles by focusing on the protection and dignity of participants.<\/p>\n<\/div>\n<\/div>\n<\/section>\n<\/div>\n<\/div>\n<\/div>\n<\/section>\n<\/div>\n<\/div>\n<\/div>\n [\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row _builder_version=”4.27.4″ _module_preset=”default” min_height=”570px” custom_margin=”-639px|auto||auto||” locked=”off” global_colors_info=”{}”][et_pb_column type=”4_4″ _builder_version=”4.27.4″ _module_preset=”default” global_colors_info=”{}”][et_pb_text _builder_version=”4.27.4″ _module_preset=”default” min_height=”496px” custom_margin=”||13px|||” custom_padding=”8px||0px|||” global_colors_info=”{}”]<\/p>\n The question of whether individual research data is protected by copyright can usually only be clarified on a case-by-case basis. Qualitative data such as interviews and longer texts may be protected by copyright if they do not follow professional conventions. Scientific representations such as drawings, plans, and tables are protected if they offer creative freedom. Photographs and images, including medical images, are also subject to copyright. Quantitative data such as measurement results are generally not protected unless they form an individual database. Metadata<\/a> is not usually protected unless it contains longer texts or images. Research data should be made available for reuse in as open and transparent a manner as possible. Since it is not possible to completely waive copyright under German law, copyright-protected data is made available via license agreements. [2] <\/a><\/p>\n [\/et_pb_text][et_pb_divider _builder_version=”4.27.4″ _module_preset=”default” width=”33%” custom_margin=”||-3px|||” global_colors_info=”{}”][\/et_pb_divider][et_pb_text _builder_version=”4.27.4″ _module_preset=”default” custom_margin=”||12px|||” custom_padding=”||14px|||” global_colors_info=”{}”]<\/p>\n [1] https:\/\/dsgvo-gesetz.de<\/a> [\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row _builder_version=”4.27.4″ _module_preset=”default” custom_margin=”-62px|auto||auto||” custom_padding=”57px|||||” locked=”off” global_colors_info=”{}”][et_pb_column type=”4_4″ _builder_version=”4.27.4″ _module_preset=”default” global_colors_info=”{}”][et_pb_heading title=”Further information” _builder_version=”4.27.4″ _module_preset=”default” title_level=”h3″ custom_margin=”||1px|||” locked=”off” global_colors_info=”{}”][\/et_pb_heading][et_pb_accordion _builder_version=”4.27.4″ _module_preset=”default” global_colors_info=”{}”][et_pb_accordion_item title=”Best practices for dealing with legal issues relating to RDM” open=”on” _builder_version=”4.27.4″ _module_preset=”default” global_colors_info=”{}”]<\/p>\n Ostendorff P und Linke D (2019): Best-Practices im Umgang mit rechtlichen Fragestellungen zum Forschungsdatenmanagement (FDM). Bibliotheksdienst, 53(10-11), 717-723,\u00a0doi.org\/10.1515\/bd-2019-0098<\/a><\/p>\n [\/et_pb_accordion_item][et_pb_accordion_item title=”Best practices for research ethics in the research process for social, behavioral, educational, and economic sciences” _builder_version=”4.27.4″ _module_preset=”default” global_colors_info=”{}” open=”off”]<\/p>\n
Researchers who collect personal or personally identifiable data<\/a> in the course of their scientific work are subject to strict data protection regulations that protect the right to informational self-determination in Germany. According to Article 4(1) of the General Data Protection Regulation (GDPR) [1], personal data includes all information relating to an identified or identifiable natural person. A person is considered identifiable if they can be identified directly or indirectly, in particular by association with specific information such as names, identification numbers, or one or more specific elements of the physical, physiological, genetic, psychological, economic, cultural, or social identity of that natural person. In addition, special categories of personal data pursuant to Article 9 GDPR\u2014including ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic and biometric data for the unique identification of a person, and data concerning sex life or sexual orientation\u2014require special data protection measures due to their sensitivity.
The processing of such data is only permitted if specific conditions are met, such as the explicit consent of the data subject. Consent must be obtained prior to data collection and covers specific aspects such as data transfer, processing, and archiving. Obtaining informed consent<\/a> is a key aspect of this. Participants must be informed transparently about the purpose of the collection, the type of data processing, storage, use, and long-term handling of their data. This also includes information about measures to ensure confidentiality, such as anonymization, as well as their rights to revoke consent at any time and request the deletion of their data.<\/p>\nSubject-specific legal and ethical requirements<\/h3>\n
Copyrights and ancillary copyrights<\/h3>\n
<\/ul>\n
\n\n\n\n\n\n\n\nPrinciple of data minimization<\/h3>\n
\n\n\n\n\nCoordination with the data protection officers at your own university<\/h3>\n
\n\n\n\n\n\n\n\nHandling of personal data<\/h3>\n
\n
In addition, ancillary copyrights pursuant to Section 72 UrhG [3] may apply to photographs, images, films, sound recordings, databases, and scientific publications.
The use of data collected within one’s own institution or provided by research data repositories<\/a> or third parties is subject to legal restrictions through copyright and ancillary copyright, contractual agreements, confidentiality agreements, and data protection regulations.
Protected research data may only be reproduced, distributed, or publicly reproduced if this is permitted by the rights holders or by law. In addition, the license terms and legal usage permissions must be observed, and there is an obligation to name the author.
Protected research data may only be reproduced, distributed, or publicly disclosed if this is permitted by the rights holders or by law. In addition, the license terms<\/a> and legal usage permissions must be observed, and there is an obligation to name the authors. Upon publication, all significant contributors must be named as co-authors.
Contractual agreements and confidentiality agreements, particularly in the context of contract research and trade secrets, may entail further restrictions on use.<\/p>\nLicences<\/h3>\n
Free licenses offer comprehensive, royalty-free rights of use. In practice, Creative Commons licenses are widely used, especially the CC-BY and CC0 license types. Other relevant standard licenses are the Open Data Commons (ODC) [4] and the \u201cDatenlizenz Deutschland\u201d (German data license). [5]
The choice of a license should follow the principle: as open as possible, as restrictive as necessary. Data that is not protected by copyright should be usable without restrictions.<\/p>\n
[2] Lauber-R\u00f6nsberg, A. (2021). 1.4 Rechtliche Aspekte des Forschungsdatenmanagements. In M. Putnings, H. Neuroth & J. Neumann (Ed.), Praxishandbuch Forschungsdatenmanagement (pp. 89-114). Berlin, Boston: De Gruyter Saur. https:\/\/doi.org\/10.1515\/9783110657807-005 <\/a>
[3] https:\/\/www.gesetze-im-internet.de\/urhg<\/a>
[4] https:\/\/opendatacommons.org<\/a>
[5] https:\/\/www.govdata.de\/dl-de\/zero-2-0<\/a><\/p>\n\n\n\n\n