Sensitive or Personal data check¶
At BSC Dataverse, only non-sensitive data can be deposited. This means no sensitive or personal data should be uploaded under any circumstances.
What is personal data?¶
Personal data is any information that relates to an identified or identifiable living individual. Different pieces of information, which collected together can lead to the identification of a particular person, also constitute personal data.
‘Personal data’ means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person. In other words, it is any data that can lead to the identification of specific (living) person. It can be as obviously identifiable data as name, but it can also be a combination of "innocent" data such as age, height/weight, wealth, job position, company, city, etc. as when combined can allow for identification of a person.
Personal data that has been de-identified, encrypted or pseudonymized but can be used to re-identify a person remains personal data and falls within the scope of the GDPR.
Personal data that has been rendered anonymous in such a way that the individual is not or no longer identifiable is no longer considered personal data. For data to be truly anonymized, the anonymisation must be irreversible.
Examples of personal data¶
- a name and surname (if this is limited to the names of the people involved in the proposal, it is not considered personal)
- a home address
- an email address such as name.surname@company.com
- an identification card number
- location data (for example the location data function on a mobile phone)
- an Internet Protocol (IP) address
- a cookie ID
- the advertising identifier of your phone
- data held by a hospital or doctor, which could be a symbol that uniquely identifies a person.
- Photo
- Date of birth
- Bank account number
- Credit card number
- National Identification Number, (Social) Insurance Number, Social Security Number
- Taxpayer Identification Number, Tax File Number, Permanent Account Number
- Passport number, national ID number, driver's license number
- Vehicle registration plate number
- Employee number
- Login
- Password
- Social media profile IDs/links
- Mobile device IDs
- Employment history, job title
- Education history
- Or any other data that could identify an individual, such as their role (e.g., 'Head of HR at BSC-CNS”)
Special categories of Personal Data (sensitive data)¶
- racial or ethnic origin
- political opinions
- religious or philosophical beliefs
- trade union membership
- genetic data, biometric data
- health data
- sex life and sexual orientation
Examples of data not considered personal data¶
- a company registration number
- an email address such as info@company.com
- anonymized data