There is quite a bit of uncertainty among the board members of many study and student associations about what they are allowed to do with personal data and what they must arrange in the area of the General Data Protection Regulation (GDPR (in Dutch AVG)). What is allowed and what is not allowed? What is necessary and what is not necessary?
Based on the answers to ten questions, the privacy officers of Utrecht University will try to help you on your way. Unfortunately, for now the brochure is only available in Dutch. And if you don’t have time to read this entire brochure, then at least ask yourself this one question: How would you want and expect an association to handle your personal data?