All courses › Technology, Ethics and Sustainability › Privacy, consent and GDPR

Privacy, consent and GDPR

Informed consent means people receive sufficient information and voluntarily agree before participating, central both in research and in personal data collection. GDPR is built partly on data minimization: only the personal data actually needed should be collected, alongside purpose and storage limitation.

data minimization+purpose limitation+storage limitation\text{data minimization} + \text{purpose limitation} + \text{storage limitation}key GDPR principles

Example

An app that requests access to the contact list without needing it for the app's function violates the data minimization principle.

Only collect what you actually need for the stated purpose — "might be useful later" is not good enough.
Practise ethics and responsibility for free →

← Stakeholders and responsible innovation · Whistleblowing and conflict of interest →

Part of Technology, Ethics and Sustainability: Ethics and responsibility.