Data collection and analysis
Process data in line with Sikt notification form, information letter, and VID’s guidelines.
Ensure participants can exercise their rights.
Significant changes in project
If significant changes are made to your project, Sikt must be notified before you implement these changes. See Sikt’s page on Notifying project changes.
Breaches/discrepancies
A discrepancy or a breach is when personal data has been processed in a problematic way. Generally, this would be when VID’s routines are not properly followed or someone outside of the project may have accessed the data.
Anyone who discovers a discrepancy must immediately notify their immediate manager.
The person who discovers the discrepancy, or the immediate manager, must report to the Pro-Rector for Research and the Data Protection Officer. The Data Protection Officer assesses whether the deviation should be reported to the Norwegian Data Protection Authority. See handling of breaches in the Framework for the processing of personal data at VID (in Norwegian) and the guidelines for handling breaches (in Norwegian).