People can participate in medical scientific research as study subjects (direct participation) or by giving consent to using their healthcare data (indirect participation). When your research data contains personal data, it has to be GDPR-compliant (in Dutch: AVG). In most cases, you are obliged to ask people for permission to use their personal data in your specific research project. Be sure that in any case, you actively inform people and ask them to sign an informed consent or a broad consent. People should also be given the option to withdraw their consent at a later stage.
This third section of HANDS addresses several topics related to privacy and autonomy of people involved in medical scientific research at the Dutch UMCs: informed consent, the difference between the care and research environment, anonymisation and pseudonymisation.
For those that wish to learn more, the Declaration of Taipei, by the World Medical Association, is the leading statement on ethical considerations regarding health databases and biobanks.