Today, the 25th May 2018, the General Data Protection Regulation (GDPR) finally comes into effect. This European regulation is exciting because it offers all kinds of protections and choices to ordinary citizens.
From now onwards, organizations must ask Europeans for explicit consent to collect and store their data, and they must explain exactly what data they're collecting, and what it will be used for.
Even better, Europeans gain the "right to be forgotten," which means they can ask organizations to delete their data permanently (unless they have valid legal reasons for holding on to it).
This is great for the people we study. But what does it mean for us researchers? How does the GDPR affect the ways we seek consent? How does it affect our data storage? What happens if people want to be forgotten?