Legal Requirements

Privacy legislation in Alberta and other jurisdictions, such as the European Union, United Kingdom and some South American countries may require privacy notifications be added to REDCap’s survey pages. These requirements are summarised below.

Alberta

Please see [this document] for more detailed information. [To be completed]

Research Data Collection

Where data is collected for research purposes, i.e. where ethics approval has been granted, privacy will be covered in the consent documents and no additional statement is usually required.

Administrative Data

Where data is collected for administrative purposes section 5(2) of Alberta’s Protection of Privacy Act (POPA) may require a “notification statement”. The Information, Privacy & Records Management Office (IPRMO) has developed this UA POPA Notification to assist in compliance. This notice must be tailored to meet individual project requirements.

Clinical Information

Clinical data, collected without REB approval, may require a notification under the terms of the Health Information Act (HIA). More information is provided on this web page.

The European Union

The European Union’s General Data Protection Regulation (GDPR) applies when collecting data directly from residents of the European Union. GDPR requires institutional webpages, including survey pages, to have a link to the System’s Web Privacy Notice. Our REDCap privacy statement contains a section that is intended to be GDPR compliant..

Other Jurisdictions

Other jurisdictions may have similar privacy requirements. For example the United Kingdom has its own version of GDPR and many South American countries also have GDPR like legislation. Our REDCap privacy statement may be adequate for these countries.

REDCap Project Settings

Log Data

A REDCap administrator can modify the following project setting, if required:

• Delete a record's logging activity when deleting the record?

  • Set to “Yes” prior to deleting records under GDPR’s right to erasure.

Survey Pages

Where required, a privacy statement can be included in individual surveys as html in a descriptive text field. However, REDCap administrators can also add text via the REDCap project settings. This text could include the entire privacy statement, or it could link to an existing web page as per the examples below. Please contact a REDCap administrator if you need help with this.

Embedded Privacy Statement

Linked Privacy Statement