In the implementation of almost all theses, various forms are needed. This text covers four of them:
- Participation Information Sheet
- Participant Consent Form
- Research Data Protection Privacy Policy Form
- Research Permit Form
You can find them in the Student’s Guide under Studies > Thesis, under the subheading ’Other forms needed for your thesis’. Save all the forms you use in your thesis and the confirmations received for them in Wihi apart from Participant Consent Forms. Keep the Participant Consent Forms securely in your own possession and destroy them once your thesis is completed and any potential appeal process has ended.
Participation Information Sheet and Participant Consent Form
When researching people, you must inform them. Based on the information they receive, they make an independent decision on whether to participate in your research. This decision must be clearly expressed, and whether the answer is affirmative or negative, it must be respected. Participant Consent Form requests consent for two different things: participation in the research itself and the processing of personal data as described in the Participation Information Sheet and in the Research Data Protection Privacy Policy Form.
The Participation Information Sheet and Participant Consent Form are meant to be customized, so add essential information related to your work and remove the instructions and irrelevant sections from the Participation Information Sheet that are not relevant to your work. To allow the participant sufficient time to consider participation, it is important that informing takes place before requesting consent. This is why the templates are separate. For example, you can formulate text from the Participation Information Sheet that you send to the subject when asking them to participate in the study. After they have agreed to participate, you can then send them the Participant Consent Form and the Description of Research Data Protection Privacy Policy Form.
The subject confirms their consent either by signature or by email. If they confirm it by message, save the entire email response in a way that shows the sender’s email address. Also, ensure that the email response is from the specific personal email address of the sender and the response clearly indicates what they are consenting to. Instruct the respondent to copy the text from the form into the response message.
Description of Research Data Protection Privacy Policy Form
The Description of Research Data Protection Privacy Policy Form is related to the General Data Protection Regulation (GDPR) of the European Union. According to it, there must be a description for all registers containing personal data, describing the principles of processing that data. Personal data is created surprisingly easily. For example, the aforementioned Participant Consent Form, which includes the name of the person participating in the study, contains personal information. Also, an audio or video recording of an interview and its transcribed version (transcription) identify the individual and are considered personal data. The interview transcription can be anonymized or pseudonymized, but there will inevitably be enough details in the interview content that it is not completely anonymous despite this.
The Research Data Protection Privacy Policy Form must be completed whenever the voice or image of the interviewee is recorded, or other direct or indirect identifiers leading to the identification of an individual are created. Indirect identifiers refer to the fact that an individual can be identified based on factors such as age, gender, place of residence, interview content details, or a combination of these factors. More information about the personal register and the cases in which it is created can be found at www.tietosuoja.fi.
When you retain these documents and files in your possession, even if only temporarily, you become the data controller, and you must complete the Description of Research Data Protection Privacy Policy Form. The form describes in detail all the information related to the collection, processing, and destruction of data containing direct or indirect personal identifiers. Include in this form the information about all the registers generated in your thesis, such as Participant Consent Forms, recordings, and transcriptions.
Relationship between the forms
You can think of the Participation Information Sheet, Consent of the Subject Template, and the Research Data Protection Privacy Policy Form as a kind of trio: the Participation Information Sheet informs the purpose of the research, allowing the subject to know what they are consenting to with the Consent of the Subject Form. The Participant Consent Form filled with the subject’s information contains personal data, so simply based on that, the threshold for completing the Research Data Protection Privacy Policy Form is crossed. This description must, in turn, be consistent with how the data processing is described in the Participation Information Sheet.
You have likely gathered information in your previous studies through interviews, observations, or surveys. In those cases, the described forms were not needed, as studying is considered household use where they are not required. However, it is still important to handle the processing of those materials with special care and ethics. The thesis differs from your previous learning tasks in that the thesis is a public document in status. Therefore, a different permit process is applied to it compared to previous exercises.
Research Permit Form
If your research subject is an organization, you may need a separate permit from that organization to conduct the research. Ensure this in good time before starting the work. Organizations requiring such a permit usually already have a ready-made form for this purpose, so use it. The research permit form in the Student Guide is intended for situations where the research subjects are students or staff of Humak.
For Surveys, the Process Is Slightly Different
The use of the aforementioned templates and forms is particularly relevant in situations where people are being interviewed or observed. However, in surveys as well, informing and obtaining unambiguous consent are essential. Information is included in the introductory statement of the survey (cover letter), and a separate section is added to the form where the respondent specifically indicates their desire to participate in the research.
If the survey requests direct or indirect personal information, a data protection statement created using the Research Data Protection Privacy Policy Form is also needed. This statement can be linked in the introductory statement, for example. If personal data is requested, the form must also have a separate mandatory tickable section where the respondent can express their consent to the processing of personal data under the conditions outlined in the data protection statement.
Checklist:
- Apply for a research permit (if necessary)
- Complete the Research Data Protection Privacy Policy Form
- Inform the research subject using the Participation Information Sheet
- Request consent from the subject using the Participant Consent Form
- Save the completed forms in Wihi apart from the Participant Consent Form which you keep yourself.
If you are unsure about which forms and templates you need for your thesis, contact your thesis supervisor.
Example 1:
In your thesis, you are developing online education for institution X. For this, you want to find out what experiences the students at the institution have on this matter. You conduct an extensive anonymous survey and also interview some students. Proceed as follows:
- Obtain a research permit from the organization in question.
- Ensure that the survey produces genuinely anonymous data, meaning respondents cannot be identified even indirectly based on their responses.
- Inform about the survey in the survey cover letter. Since you do not collect personal information, you do not need a description of personal data processing actions. Add a mandatory tickable section to the survey where the respondent indicates their desire to participate in the research.
- Complete the Description of Research Data Protection Privacy Policy Form for the interviews.
- Inform the interviewees using the Participation Information Sheet formulated by you.
- Request consent from the interviewees using the Participant Consent Form ap