Scope

This policy outlines how Kohlrabi collects, uses, stores, and protects personal data in line with

the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We

are committed to ensuring that the personal information we handle is treated with care,

transparency, and respect.

​

This policy outlines how Kohlrabi collects, uses, stores, and protects personal data in line with

the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We

are committed to ensuring that the personal information we handle is treated with care,

transparency, and respect.

​

This policy applies to all staff, contractors, and partners working with Kohlrabi who access or

handle personal data relating to:

​

• Members of the public who participate in our research

• Stakeholders who engage in consultations or surveys

• Employers or organisations who provide information as part of our work

​

We have an ethical and legal responsibility to ensure that we store and share confidential and

personal data securely and do not disclose them to unauthorised persons. Each proposal to

collect, use and share data for research purposes will be different, and may need their own

ethics application. The following protocol outlines our core responsibilities and

considerations.

​

Definitions

Personal data is any information relating to an identified or identifiable natural person. These

data enjoy statutory protection under the General Data Protection Regulation 2016 and the

Data Protection Act 2018. Under this legislation any personal data collected by you must be

processed fairly and lawfully.

​

Special category sensitive personal data includes information about an individual's: race;

ethnic origin; politics; religion; trade union membership; genetics; biometrics (where used for

ID purposes); health; sex life; or sexual orientation.

​

De-identified data is data which can be pseudonymised for purposes of processing and

analysis, with the personally-identifying information and their linked IDs stored separately

from the working dataset. When the study is complete and if there is no further need to link

individuals to data, the linking key can be destroyed, so that the data become fully

anonymised.

​

Anonymous data is defined as data having no name or personally identifiable information

attached. If data collected from human subjects have been fully anonymised or is collected

with no identifiers attached, you do not need consent to share them, but it is good practice to 

inform your research participants how the data you collect from them will be used.

 

Your

information sheet should address this and your consent form should specifically allow the

participant to indicate they have understood your intentions and agree to data sharing. In

some cases, even a service evaluation, or other use of anonymous data might require consent

if there is reason to believe that (e.g. for small sample sizes, very specific service, case studies

etc.) it might be possible to re-identify someone.

​

​