{"id":252350,"date":"2025-05-22T16:52:31","date_gmt":"2025-05-22T16:52:31","guid":{"rendered":"https:\/\/peraltafinancing.com\/anthropology\/ethnography-ethics-and-the-gdpr-three-misconceptions-and-one-concern\/"},"modified":"2025-05-22T16:52:31","modified_gmt":"2025-05-22T16:52:31","slug":"ethnography-ethics-and-the-gdpr-three-misconceptions-and-one-concern","status":"publish","type":"post","link":"https:\/\/fivemor.com\/?p=252350","title":{"rendered":"Ethnography, Ethics and the GDPR: Three Misconceptions and One Concern"},"content":{"rendered":"


\n
<\/p>\n

Since 2018, personal data collected, stored, or otherwise processed in the European Union must comply with the GDPR (General Data Protection Regulation). I would like to share some misunderstandings about the GDPR and also check if my understanding of the GDPR is shared.<\/p>\n

\n

The GDPR<\/a> entered my professional life in several ways: As a supervisor of BA, MA and PhD students who had questions about privacy in ethnographic research; as the PI of an ERC Consolidator Project<\/a> that had to comply with the ERC\u2019s ethics requirements; and as former chair of the Ethics Review Committee Social Sciences<\/a> at my faculty. Among committee members, researchers, privacy officers, and other professionals we had many valuable conversations about the GDPR. Many complex issues came up, but let me limit myself to three common misunderstandings and also share a concern I have.<\/p>\n

Assumption 1: Informed consent needs to be given in writing<\/strong><\/p>\n

No. Research participants need to freely and unambiguously give consent to the researcher. This can be in writing, but the GDPR does not require that. The GDPR explicitly states that the research participants’ approval (the GDPR uses the term data subject) can be oral: \u2018Consent should be given by a clear affirmative act establishing a freely given, specific, informed and unambiguous indication of the data subject’s agreement to the processing of personal data relating to him or her, such as by a written statement, including by electronic means, or an oral statement.\u2019 It can, for example, be ethically compromising to ask functionally illiterate respondents for a signature. <\/p>\n

A question that often comes up is: \u2018If there is no signed form, how can one prove that one received informed consent?\u2019 Without a signed document, researchers might risk being accused of collecting data without informed consent. This is surely an issue to consider, but this is a risk that the researcher (and, by extension, the university) must deal with. <\/p>\n

However, dealing with this concern for (legal) repercussions into a bureaucratic procedure by only allowing informed consent in writing is a misreading of the GDPR. Much better is to creatively find other ways of making it at least plausible that informed consent has been given. That can be with a voice recording, by noting it down in a way that clarifies the context of the study, and I am sure there are also other solutions. This requires creativity from the side of the researcher and sufficient space in the university\u2019s procedures to acknowledge this. Requiring that all researchers use an informed consent form does, however, not do justice to the GDPR and can be unethical as that might harm research participants. <\/p>\n

Assumption 2: The GDPR requires informed consent for doing research<\/strong><\/p>\n

No. The GDPR is only about processing personal data, not for doing research. Let us look at a hypothetical case to clarify this. Imagine, a researcher wants to do research without asking anyone for consent and maybe even without clarifying his or her role. The researcher can do that according to the GDPR as long as the research does not involve the processing of personal data. Informed consent is only<\/em> needed when the researcher collects personal data. For the GDPR, this is defined as data that can be traced back to the individual, the data subject. <\/p>\n

When the researcher does not collect data (no notes, no recording) no informed consent is required, at least according to the GDPR. When the researcher collects data but the data cannot be connected to the \u2018data subject\u2019, then this is not (sensitive) personal data. If no (sensitive) personal data is collected, for example, because notes are anonymous, the GDPR does not require informed consent.<\/p>\n

I find it useful to distinguish GDPR requirements from ethics within social sciences. Research ethics are much broader than the GDPR and confront researchers with complex dilemmas and conflicts about interests and norms that deeply affect research practices. Transparency, honesty, and considering the interests of people and communities we study are integral to teaching, see \u2018Ethics and Integrity in Academic Work\u2019<\/a>, for an excellent example. <\/p>\n

How to ask people and communities for permission for research is also part of ethics guidelines and protocols. But this is separate from the GDPR. Keeping GDPR requirements separate from research ethics \u2013 while acknowledging that this separation is only possible at an analytical level \u2013 enables researchers to much better and more suitable ways of integrating the GDPR in research practices. The GDPR only applies to processing (sensitive) personal data, meaning data that can be traced back to the individual or \u2018data subject\u2019.<\/p>\n

Assumption 3: Informed consent is having a box ticked<\/strong><\/p>\n

No, the GDPR unambiguously states: \u2018Silence, pre-ticked boxes or inactivity should not therefore constitute consent.\u2019 Pre-ticked boxes are sometimes part of websites or other forms of online research and are not allowed. The reason why I point this out is that this very clearly shows how the GDPR is about a real and lived process, not simply undergoing a bureaucratic procedure. The GDPR text points out very clearly that ticking the boxes is not the same as having informed consent.<\/p>\n

Finally, a concern about criminalizing research<\/strong><\/p>\n

Laws are subject to interpretation and sometimes conflict with one another. This requires complex judgement calls, which this international research team encountered first-hand<\/a> in their attempt to do covert research among politicians. Laws, including the GDPR, create uncertainty among researchers and their universities. An understandable response to this uncertainty is to be \u2018on the safe side\u2019 and set up strict bureaucratic rules and procedures. <\/p>\n

There is a risk of regulatory overreach when imposing restrictions that go beyond what the GDPR requires. Regulatory overreach is especially problematic when researchers critically examine companies, institutions, or other powerful actors. It creates insecurity among researchers and does not acknowledge the limited scope of the GDPR. It promotes an audit culture that restricts academic freedoms and do not anymore reflect the nuances of the GDPR.<\/p>\n

Such a distortion of the GDPR risks criminalizing lawful and ethical research practices and can induce fear and self-censorship within academic communities. It is essential to push back against regulatory overreach, to acknowledge the intrinsic value of curiosity in society, and to affirm the vital role of critical scholarship in challenging power structures. The GDPR does not \u2013 and should not \u2013 serve as a pretext for suppressing these pursuits.<\/p>\n<\/p><\/div>\n\n","protected":false},"excerpt":{"rendered":"

Since 2018, personal data collected, stored, or otherwise processed in the European Union must comply with the GDPR (General Data Protection Regulation). I would like to share some misunderstandings about the GDPR and also check if my understanding of the GDPR is shared. The GDPR entered my professional life in several ways: As a supervisor […]<\/p>\n","protected":false},"author":1,"featured_media":252351,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[11767],"tags":[29853,16127,7825,23851,10915],"dealstore":[],"offerexpiration":[],"class_list":["post-252350","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-anthropology","tag-concern","tag-ethics","tag-ethnography","tag-gdpr","tag-misconceptions"],"yoast_head":"\nEthnography, Ethics and the GDPR: Three Misconceptions and One Concern - Som2ny Network<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/fivemor.com\/?p=252350\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Ethnography, Ethics and the GDPR: Three Misconceptions and One Concern - Som2ny Network\" \/>\n<meta property=\"og:description\" content=\"Since 2018, personal data collected, stored, or otherwise processed in the European Union must comply with the GDPR (General Data Protection Regulation). I would like to share some misunderstandings about the GDPR and also check if my understanding of the GDPR is shared. The GDPR entered my professional life in several ways: As a supervisor […]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/fivemor.com\/?p=252350\" \/>\n<meta property=\"og:site_name\" content=\"Som2ny Network\" \/>\n<meta property=\"article:published_time\" content=\"2025-05-22T16:52:31+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/fivemor.com\/wp-content\/uploads\/2025\/05\/Banner-Leiden-Anthropology-Blog-Erik-Bahre_2025-05-22-122926_yvpj.png\" \/>\n\t<meta property=\"og:image:width\" content=\"450\" \/>\n\t<meta property=\"og:image:height\" content=\"300\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"admin\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"admin\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/fivemor.com\/?p=252350#article\",\"isPartOf\":{\"@id\":\"https:\/\/fivemor.com\/?p=252350\"},\"author\":{\"name\":\"admin\",\"@id\":\"https:\/\/fivemor.com\/#\/schema\/person\/b85e3c3dc0e1daea076524dc8810c371\"},\"headline\":\"Ethnography, Ethics and the GDPR: Three Misconceptions and One Concern\",\"datePublished\":\"2025-05-22T16:52:31+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/fivemor.com\/?p=252350\"},\"wordCount\":1057,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/fivemor.com\/#organization\"},\"image\":{\"@id\":\"https:\/\/fivemor.com\/?p=252350#primaryimage\"},\"thumbnailUrl\":\"https:\/\/fivemor.com\/wp-content\/uploads\/2025\/05\/Banner-Leiden-Anthropology-Blog-Erik-Bahre_2025-05-22-122926_yvpj.png\",\"keywords\":[\"Concern\",\"Ethics\",\"ethnography\",\"GDPR\",\"Misconceptions\"],\"articleSection\":[\"Anthropology\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/fivemor.com\/?p=252350#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/fivemor.com\/?p=252350\",\"url\":\"https:\/\/fivemor.com\/?p=252350\",\"name\":\"Ethnography, Ethics and the GDPR: Three Misconceptions and One Concern - Som2ny Network\",\"isPartOf\":{\"@id\":\"https:\/\/fivemor.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/fivemor.com\/?p=252350#primaryimage\"},\"image\":{\"@id\":\"https:\/\/fivemor.com\/?p=252350#primaryimage\"},\"thumbnailUrl\":\"https:\/\/fivemor.com\/wp-content\/uploads\/2025\/05\/Banner-Leiden-Anthropology-Blog-Erik-Bahre_2025-05-22-122926_yvpj.png\",\"datePublished\":\"2025-05-22T16:52:31+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/fivemor.com\/?p=252350#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/fivemor.com\/?p=252350\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/fivemor.com\/?p=252350#primaryimage\",\"url\":\"https:\/\/fivemor.com\/wp-content\/uploads\/2025\/05\/Banner-Leiden-Anthropology-Blog-Erik-Bahre_2025-05-22-122926_yvpj.png\",\"contentUrl\":\"https:\/\/fivemor.com\/wp-content\/uploads\/2025\/05\/Banner-Leiden-Anthropology-Blog-Erik-Bahre_2025-05-22-122926_yvpj.png\",\"width\":450,\"height\":300},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/fivemor.com\/?p=252350#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/fivemor.com\/?bp_activities=1\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Ethnography, Ethics and the GDPR: Three Misconceptions and One Concern\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/fivemor.com\/#website\",\"url\":\"https:\/\/fivemor.com\/\",\"name\":\"Som2ny Network\",\"description\":\"Daily Deals\",\"publisher\":{\"@id\":\"https:\/\/fivemor.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/fivemor.com\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/fivemor.com\/#organization\",\"name\":\"Som2ny Network\",\"url\":\"https:\/\/fivemor.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/fivemor.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/fivemor.com\/wp-content\/uploads\/2026\/07\/4a0953c4-logo-300x86-1.png\",\"contentUrl\":\"https:\/\/fivemor.com\/wp-content\/uploads\/2026\/07\/4a0953c4-logo-300x86-1.png\",\"width\":300,\"height\":86,\"caption\":\"Som2ny Network\"},\"image\":{\"@id\":\"https:\/\/fivemor.com\/#\/schema\/logo\/image\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\/\/fivemor.com\/#\/schema\/person\/b85e3c3dc0e1daea076524dc8810c371\",\"name\":\"admin\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/fivemor.com\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/729ae85bf62b9917e93538db2f2688ca?s=96&r=g&default=https%3A%2F%2Ffivemor.com%2Fwp-content%2Fplugins%2Fbuddypress-first-letter-avatar%2Fimages%2Fdefault%2F96%2Flatin_a.png\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/729ae85bf62b9917e93538db2f2688ca?s=96&r=g&default=https%3A%2F%2Ffivemor.com%2Fwp-content%2Fplugins%2Fbuddypress-first-letter-avatar%2Fimages%2Fdefault%2F96%2Flatin_a.png\",\"caption\":\"admin\"},\"sameAs\":[\"https:\/\/fivemor.com\"],\"url\":\"https:\/\/fivemor.com\/?author=1\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Ethnography, Ethics and the GDPR: Three Misconceptions and One Concern - Som2ny Network","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/fivemor.com\/?p=252350","og_locale":"en_US","og_type":"article","og_title":"Ethnography, Ethics and the GDPR: Three Misconceptions and One Concern - Som2ny Network","og_description":"Since 2018, personal data collected, stored, or otherwise processed in the European Union must comply with the GDPR (General Data Protection Regulation). I would like to share some misunderstandings about the GDPR and also check if my understanding of the GDPR is shared. The GDPR entered my professional life in several ways: As a supervisor […]","og_url":"https:\/\/fivemor.com\/?p=252350","og_site_name":"Som2ny Network","article_published_time":"2025-05-22T16:52:31+00:00","og_image":[{"width":450,"height":300,"url":"https:\/\/fivemor.com\/wp-content\/uploads\/2025\/05\/Banner-Leiden-Anthropology-Blog-Erik-Bahre_2025-05-22-122926_yvpj.png","type":"image\/png"}],"author":"admin","twitter_card":"summary_large_image","twitter_misc":{"Written by":"admin","Est. reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/fivemor.com\/?p=252350#article","isPartOf":{"@id":"https:\/\/fivemor.com\/?p=252350"},"author":{"name":"admin","@id":"https:\/\/fivemor.com\/#\/schema\/person\/b85e3c3dc0e1daea076524dc8810c371"},"headline":"Ethnography, Ethics and the GDPR: Three Misconceptions and One Concern","datePublished":"2025-05-22T16:52:31+00:00","mainEntityOfPage":{"@id":"https:\/\/fivemor.com\/?p=252350"},"wordCount":1057,"commentCount":0,"publisher":{"@id":"https:\/\/fivemor.com\/#organization"},"image":{"@id":"https:\/\/fivemor.com\/?p=252350#primaryimage"},"thumbnailUrl":"https:\/\/fivemor.com\/wp-content\/uploads\/2025\/05\/Banner-Leiden-Anthropology-Blog-Erik-Bahre_2025-05-22-122926_yvpj.png","keywords":["Concern","Ethics","ethnography","GDPR","Misconceptions"],"articleSection":["Anthropology"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/fivemor.com\/?p=252350#respond"]}]},{"@type":"WebPage","@id":"https:\/\/fivemor.com\/?p=252350","url":"https:\/\/fivemor.com\/?p=252350","name":"Ethnography, Ethics and the GDPR: Three Misconceptions and One Concern - Som2ny Network","isPartOf":{"@id":"https:\/\/fivemor.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/fivemor.com\/?p=252350#primaryimage"},"image":{"@id":"https:\/\/fivemor.com\/?p=252350#primaryimage"},"thumbnailUrl":"https:\/\/fivemor.com\/wp-content\/uploads\/2025\/05\/Banner-Leiden-Anthropology-Blog-Erik-Bahre_2025-05-22-122926_yvpj.png","datePublished":"2025-05-22T16:52:31+00:00","breadcrumb":{"@id":"https:\/\/fivemor.com\/?p=252350#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/fivemor.com\/?p=252350"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/fivemor.com\/?p=252350#primaryimage","url":"https:\/\/fivemor.com\/wp-content\/uploads\/2025\/05\/Banner-Leiden-Anthropology-Blog-Erik-Bahre_2025-05-22-122926_yvpj.png","contentUrl":"https:\/\/fivemor.com\/wp-content\/uploads\/2025\/05\/Banner-Leiden-Anthropology-Blog-Erik-Bahre_2025-05-22-122926_yvpj.png","width":450,"height":300},{"@type":"BreadcrumbList","@id":"https:\/\/fivemor.com\/?p=252350#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/fivemor.com\/?bp_activities=1"},{"@type":"ListItem","position":2,"name":"Ethnography, Ethics and the GDPR: Three Misconceptions and One Concern"}]},{"@type":"WebSite","@id":"https:\/\/fivemor.com\/#website","url":"https:\/\/fivemor.com\/","name":"Som2ny Network","description":"Daily Deals","publisher":{"@id":"https:\/\/fivemor.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/fivemor.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/fivemor.com\/#organization","name":"Som2ny Network","url":"https:\/\/fivemor.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/fivemor.com\/#\/schema\/logo\/image\/","url":"https:\/\/fivemor.com\/wp-content\/uploads\/2026\/07\/4a0953c4-logo-300x86-1.png","contentUrl":"https:\/\/fivemor.com\/wp-content\/uploads\/2026\/07\/4a0953c4-logo-300x86-1.png","width":300,"height":86,"caption":"Som2ny Network"},"image":{"@id":"https:\/\/fivemor.com\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/fivemor.com\/#\/schema\/person\/b85e3c3dc0e1daea076524dc8810c371","name":"admin","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/fivemor.com\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/729ae85bf62b9917e93538db2f2688ca?s=96&r=g&default=https%3A%2F%2Ffivemor.com%2Fwp-content%2Fplugins%2Fbuddypress-first-letter-avatar%2Fimages%2Fdefault%2F96%2Flatin_a.png","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/729ae85bf62b9917e93538db2f2688ca?s=96&r=g&default=https%3A%2F%2Ffivemor.com%2Fwp-content%2Fplugins%2Fbuddypress-first-letter-avatar%2Fimages%2Fdefault%2F96%2Flatin_a.png","caption":"admin"},"sameAs":["https:\/\/fivemor.com"],"url":"https:\/\/fivemor.com\/?author=1"}]}},"_links":{"self":[{"href":"https:\/\/fivemor.com\/index.php?rest_route=\/wp\/v2\/posts\/252350","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/fivemor.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/fivemor.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/fivemor.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/fivemor.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=252350"}],"version-history":[{"count":0,"href":"https:\/\/fivemor.com\/index.php?rest_route=\/wp\/v2\/posts\/252350\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/fivemor.com\/index.php?rest_route=\/wp\/v2\/media\/252351"}],"wp:attachment":[{"href":"https:\/\/fivemor.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=252350"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/fivemor.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=252350"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/fivemor.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=252350"},{"taxonomy":"dealstore","embeddable":true,"href":"https:\/\/fivemor.com\/index.php?rest_route=%2Fwp%2Fv2%2Fdealstore&post=252350"},{"taxonomy":"offerexpiration","embeddable":true,"href":"https:\/\/fivemor.com\/index.php?rest_route=%2Fwp%2Fv2%2Fofferexpiration&post=252350"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}