Data protection, scientific research, and the role of information
This paper aims to assess the information duties set out in the General Data Protection Regulation (GDPR) and national adaptations when the purpose of processing is scientific research. Information about the processing plays a critical role for data subjects in general. However, it becomes even more central in the research context, due to the peculiarities of the legal regime applicable to it. The analysis critically points out that the GDPR’s information obligations are not entirely satisfying and present some flaws. Furthermore, the GDPR information duties risk suffering from the same shortcomings usually addressed in the literature about mandated disclosures. The paper argues that the principle of transparency, developed as a “user-centric” concept, can support the adoption of solutions that embed behavioural insights to support the rationale of the information provision better.