What the New EDPB Scientific Research Guidelines Mean for Innovation

Apr 6, 2026

What the New EDPB Scientific Research Guidelines Mean for Innovation

Scientific research and data protection have long shared a delicate relationship. On 15 April 2026, the European Data Protection Board (EDPB) published Guidelines 1/2026 on the processing of personal data for scientific research purposes, bringing much‑needed clarity to how the GDPR should be applied in modern research settings.

For organisations working in R&D, health, life sciences, AI, or social research, these guidelines are more than a theoretical exercise—they provide practical guardrails for using personal data responsibly while continuing to innovate.

A clearer definition of “scientific research”

One of the most important contributions of the guidelines is a structured way to determine whether an activity truly qualifies as scientific research under the GDPR. The EDPB introduces six key‑indicative factors, including a methodical approach, adherence to ethical standards, verifiability, independence, societal value, and the potential to contribute new knowledge.

This matters because only genuinely scientific activities benefit from GDPR provisions such as the presumption of compatibility for further processing. Routine analytics, internal product optimisation, or marketing research will not automatically qualify simply because they are labelled “research.”

Purpose compatibility and long‑term data use

The guidelines reaffirm that further processing of personal data for scientific research is presumed compatible with the original purpose of collection. This removes the need for a full purpose‑compatibility assessment when datasets are reused for research—provided the processing is lawful and appropriate safeguards are in place. Similarly, the EDPB clarifies how the storage limitation principle applies to research. Personal data may be retained for longer periods when necessary for reproducibility, verification, or foreseeable future research projects, as long as retention decisions are documented and regularly reviewed.

Consent: broad, dynamic, and ethical by design

Recognising the realities of exploratory and longitudinal research, the guidelines endorse both broad consent and dynamic consent models. Broad consent can be used where specific research questions are not yet fully defined, but it must be supported by strong safeguards such as transparency mechanisms, ethical oversight, and meaningful opportunities for participants to stay informed.

Importantly, the EDPB draws a clear distinction between ethical consent to participate in research and GDPR consent as a legal basis. Organisations should not assume that one automatically satisfies the other.

Safeguards are not optional

Throughout the document, the message is consistent: flexibility for research comes with responsibility. Controllers are expected to prioritise anonymisation or pseudonymisation, limit access to research data, conduct risk assessments or DPIAs where required, and adopt governance measures such as ethics committees or secure processing environments.

For sensitive data—especially health, genetic, or biometric data—the bar is even higher. Member State laws may impose additional conditions, and organisations must be prepared to navigate both GDPR and national frameworks.

What organisations should do next

These guidelines are a reminder that privacy and research excellence are not competing goals. By embedding data protection into research design from the outset, organisations can strengthen trust, improve data quality, and reduce compliance risk.

Now is a good moment to:

Re‑evaluate which activities truly qualify as scientific research
Review consent models and transparency practices
Assess whether existing safeguards meet the EDPB’s expectations

Conclusion

The EDPB’s Scientific Research Guidelines offer a pragmatic, research‑friendly interpretation of the GDPR—one that recognises the societal value of science while reinforcing the protection of individuals’ rights. For privacy professionals and researchers alike, they provide a common language and a clearer path forward.

What the New EDPB Scientific Research Guidelines Mean for Innovation