Adapting to local contexts

Laws, regulations, and norms relating to data protection vary across countries and organisations. Therefore, users of this toolkit should:

• Adapt this guidance to their own legal and institutional requirements.
• Consider cultural, technological, and ethical factors in their local context.
• Ensure that collection, use, and protection of personal data is appropriate and proportionate to their local setting and country.

What is considered lawful or acceptable in one country may not apply in other countries. Expectations around privacy, consent, and confidentiality may also differ.

Key considerations for global use

When applying the guidance in this chapter:

• Confirm whether national or local data protection laws apply to your project.
• Review your organisation’s data handling policies and ethical procedures.
• Engage appropriate colleagues, advisors, or review bodies to ensure the approach is consistent with both local requirements and good practice.
• Communicate clearly with patient and public contributors about how their data will be handled, stored and used, and ensure this is done in a way that reflects local norms and expectations.

Even when formal data protection laws are not in place, projects involving PPI should still uphold core principles of privacy, transparency and the careful handling of any personal data shared by participants.