7. Completion of projects
The processing of personal data and health research data is temporary, and the data controller shall not process or store personal and health data longer than is necessary to carry out the purpose of the processing.
7.a Completion of research projects
- The project manager is responsible for ensuring that the personal data is processed following the project's notification form, approvals, assessments, consent, and project plan. This usually [1] means that data is anonymised at the end of the project.
- Where continued storage of research data after project completion is desired, follow the guidelines in 4.c. Long-term storage of research data. This is relevant where use is planned in other research projects or follow-up studies. Several funding sources also require long-term storage and sharing of data at the end of the project.
- If the project processes health information, the project manager submits a final report to REK at the end of the project.
- The project manager submits a status report to NSD at the end of the project, a reminder is sent from NSD. NSD follows up the projects to ensure that data is anonymised and/or legally archived at the end of the project.
7.b Completion of student projects
- The project manager/supervisor and the student are responsible for ensuring that personal information and health research data are processed following the project's project plan, notification form and consent. In most cases [1], the data must be anonymised at the end of the project. This usually means that data is anonymised at the end of the project. It can be agreed that the student performs this work.
- Where continued storage of research data after project completion is desired, follow the guidelines in 4.c. Long-term storage of research data. This is relevant where use is planned in other research projects or follow-up studies.
- The project manager/supervisor is responsible for submitting a final report to REK upon completing projects that process health information.
- The supervisor is responsible for submitting a status report to NSD at the end of the project. A student can submit this report for their project.
- NSD follows up the projects at the end of the project to ensure that data is deleted, anonymised and/or legally archived at the end of the project.
[1] In some cases, the data material must be stored for new research purposes or archived in approved research archives. This may entail extended processing of personal data and must be described in the notification form to NSD before start-up. There must be a legal basis for further use or archiving of the data containing personal data.