In this workshop Jacques Flores Dourojeanni will discuss the basic principles of the GDPR and how they apply to research data. The workshop aims to explain how one can become compliant whilst collecting personal data, taking into account the derogations that exist for research purposes. In this workshop you will learn to recognize personal and sensitive personal data, understand the legal basis for collection, as well as how to formulate informed consent forms. Furthermore, this workshop also covers diverse security and privacy measures that can be taken to protect the privacy of your data subjects. These include pseudonymization, anonymization and encryption amongst others.