Taner Kuru, an eLaw alumnus, was awarded the prestigious European Data Protection Law Review ‘Young Scholar Award’ for his paper on the shortcomings in the GDPR for the regulation of genetic testing at the prestigious Computers, Privacy and Data Protection Conference (CPDP).

In the Netherlands it is now possible to visit non-essential shops if you make an appointment beforehand. But when you book an appointment you have to provide a lot of personal data. Are shops allowed to ask you for all this data and what happens to it?

Gianclaudio Malgieri, Associate Professor at eLaw Leiden, was invited as a speaker at the Annual Conference of the European Academy of Law (ERA), on 21 March in Brussels.

As a university employee, you probably work with personal data. That is not just names and telephone numbers – it can also include things like cookies. How can you make sure you are working in a privacy-proof way?

While health data is essential for scientific research, that data also needs to be protected. In her doctoral thesis, Irith Kist found a balance between protecting the individual and exchanging health data.

Your options for data storage may vary depending on factors such as size and sensitivity of the data or collaboration with partners outside the university. We are all responsible for data protection. To keep (personal) data as secure as possible, the university has established an information security…

Do you have questions about data management? Please contact the data stewards:

On Thursday 29 February, the European Data Protection Supervisor, Wojciech Wiewiórowski, visited the eLaw Center for Law and Digital Technologies at Leiden Law School to give a lecture entitled 'Fundamental rights and/or market surveillance: The current and future role of Data Protection Authorities…

On 3 April 2024, the University L'Orientale in Naples will hold a full afternoon conference to discuss a book written by Dr Gianclaudio Malgieri, Associate Professor at eLaw. The title is 'Vulnerability and Data Protection Law', published with Oxford University Press in April 2023.

In The Hague, the international city of peace, justice, and security, the Faculty of Governance and Global Affairs' bachelor's programmes offer you the opportunity to learn from experts in security and crisis response. Here, you will gain the knowledge and skills to keep people, organisations, and societies…

A data processing register is a record of which personal data you process and who you share this data with. If you collect personal data for your research, you must record this in the data processing register.

If you bring in a (new) person who will be processing personal data for you, this person is not allowed to use this information for his or her own purposes. You need to formalise this in a data processing agreement. The university will usually have an agreement in place.

If your research project involves collecting private or otherwise sensitive data, you must ensure adequate data protection measures are taken. Research must be conducted in accordance with the General Data Protection Regulation (GDPR). In terms of patient data, for instance, when used for research carried…

EUobserver has published an article on the European Commission’s leaked 'Digital Omnibus' draft, featuring comments by Gianclaudio Malgieri, Associate Professor at eLaw, on potential implications for the GDPR.

Security

Individuals have the right to instruct the university to delete their personal data in a number of cases. For instance, if the university no longer needs the data, or if the person withdraws consent previously given.

Universities, companies, organisations and societies are increasingly facing enormous quantities of data. It is a great challenge to transform these Big Data into knowledge, which is why Leiden University has launched a University-wide Data Science Research Programme.

As a standard, your workplace comes equipped with a limited amount of disk space. We offer a number of options for extending your disk space. In addition, ISSC can help you recover lost files. You can also securely store your files in the cloud via OneDrive and Teams. Whichever storage you use, be aware…

ICT, Security

As an employee of Leiden University, you probably work with or come into contact with personal data. The concept of ‘personal data’ is core to the General Data Protection Regulation (GDPR). If you work with personal data, you must be able to explain clearly, comprehensively and in simple language how…

Are you handling personal data just once, for instance when taking the minutes of a meeting or organising an employee outing? You do not need to include this use in the data processing register if you stick to the following conditions.

During an evacuation, all employees and students of the Law Faculty gather at the Kamerlingh Onnesgebouw or the Old Observatory.

Should criminal law have a greater role in protecting this democracy? In his inaugural lecture, Professor Jeroen ten Voorde urges caution.

Affective Computing (AC and sometimes called ‘Emotional AI’) provides opportunities to automatically process emotional data. However, is EU data protection law fit for purpose when it is applied to such AC approaches?

Gianclaudio Malgieri, Associate Professor at eLaw Leiden, was invited as a speaker on two panels at the special CPDP Data Protection Day on 25 January in Brussels, an event co-organised by the European Data Protection Supervisor and the Council of Europe.