Update questions on personal data wrt. GDPR

[jmfrenzel]

Is your feature request related to a problem? Please describe. The common questions provided by rdmo catalog need updates because of the EU GDPR, new German federal data protection act, and new NRW state data protection act.

Describe the solution you'd like

• [x] Add text changes to the wiki of this repository
• [x] create PR at https://github.com/rdmorganiser/rdmo-catalog Note: change local description e.g. UA Ruhr specific terms into general terms
• [x] proir to the PR, make sure there is nothing specific to UARuhr left in the questions/help texts
• [x] update the UA ruhr catalog from #4

Describe alternatives you've considered A clear and concise description of any alternative solutions or features you've considered.

Additional context Add any other context or screenshots about the feature request here.

[Bassbiest]

GDPR related question changes are live and ready for review in the wiki.

[jwindeck]

In the question "Does this dataset contain personal data?" the RUB website and DPO is mentioned. The information on the website is good, but is it ok for the others to link to RUB? (Then we need to fix "Ruhr-University Bochum" to "Ruhr University Bochum", too)

we need to update the references

• Does this dataset contain personal data?
  • [2] link is broken, and we should call it "BDSG" instead of BDSG-neu in the text. New link: http://www.gesetze-im-internet.de/bdsg_2018/
  • [3] is still about the draft proposal, but since may 18 there is a NRW data protection law. New link: https://recht.nrw.de/lmi/owa/br_text_anzeigen?v_id=3520071121100436275
• Which laws are to be considered beside the European GDPR regarding data protection issues for the research project?
  • same links

[jmfrenzel]

On behalf of Dr. Kathrin Höhner:

hab keinen github-account, kann somit nicht sofort kommentieren. geht aber vllt. auch schneller so:

bitte umformulieren:

Original: " Es gestattet Regelungsspielräume auf nationaler Ebene. In Deutschland regelt dies das Bundesdatenschutzgesetz (BDSG-neu) [2], bzw. für Hochschulen gelten die individuellen Datenschutzgesetze der Länder, z.B. Datenschutzgesetz Nordrhein-Westfalen (DSG NRW) [3]."

Vorschlag: " Sie (da DSGVO) gestattet Regelungsspielräume auf nationaler Ebene. In Deutschland regelt dies das Bundesdatenschutzgesetz (BDSG-neu) [2]. Für Hochschulen gelten zum großen Teil die individuellen Datenschutzgesetze der Länder, z.B. Datenschutzgesetz Nordrhein-Westfalen (DSG NRW) [3]."

bitte ändern:

Original: "Mehr Informationen zum Thema finden Sie auf der Webseite des Datenschutzbeauftragten der Ruhr-Universität Bochum. "

NEU: "Mehr Informationen zum Thema finden Sie auf der Webseite des Datenschutzbeauftragten der UA Ruhr."

[Bassbiest]

Requested changes are applied, but I am missing a link for the data protection officer of the UA Ruhr. The text still references the officer of the Ruhr University Bochum.

[jmfrenzel]

https://github.com/FDM-UARuhr/rdmo-catalog-uaruhr/wiki#changes-to-gdpr-related-questions-in-the-uaruhr-rdmo-catalogs

[jmfrenzel]

Datenschutzstelle der Universitätsalianz Ruhr http://datenschutz.uaruhr.de/

DSB: Ruhr-Universität Bochum: https://dsb.ruhr-uni-bochum.de
DSB: Universität Duisburg-Essen: https://www.uni-due.de/verwaltung/organisation/just_datenschutz.php
DSB TUDo: https://www.tu-dortmund.de/universitaet/organisation/beauftragte-vertrauenspersonen/#accordion-2213-764

[jwindeck]

a few additional ideas for changes

• to be consistent with the other questions we should change the style of the footnotes and use links in the text instead of [1], [2], ...
• "Regulation (EU) 2016/679 eur-lex.europa.eu" should be "Regulation (EU) 2016/679 eur-lex.europa.eu"
• Welche Gesetze sind neben der europäischen DSGVO [1] bezüglich der Fragen des Datenschutzes für das Projekt zu beachten?
  • we should remove the footnote [1] from the headline
  • new: Welche Gesetze sind neben der europäischen DSGVO bezüglich der Fragen des Datenschutzes für das Projekt zu beachten?
• Which laws are to be considered beside the European GDPR regarding data protection issues for the research project?
  • the list of answers is part of the question text and need to be removed
• To what extent is the 'informed consent' of the persons concerned obtained?
  • the second paragraph needs an update
  • old: Where required please get in touch with the data protection officer of your institution for further information on the necessary conditions for consent.
  • new: Where required please get in touch with the data protection officer(LINK) for further information on the necessary conditions for consent.

[jmfrenzel]

This alternative option would allow for more than one LINK:

• old: Where required please get in touch with the data protection officer of your institution for further information on the necessary conditions for consent.

• new : Where required please get in touch with the data protection officer of your institution for further information on the necessary conditions for consent.

  • institution (LINK)
  • optional institution (LINK)
  • ...

[Bassbiest]

I added all changes to the questions. Please review them once more, before I incorporate these changes into the different catalogs. @jmfrenzel @jwindeck

[Bassbiest]

All catalogs have been updated. For further changes we need to develop a system that lets us track suggestions/changes to the questions individually.

The pull request at rdmorganiser is open.

[Bassbiest]

The pull request #2 was merged into master. Closing Issue.