“Data” refers to the material collected by the student for the thesis—this may include, for example, survey responses, observation matrices, or interview transcripts. If the data collected forms a personal data register, the student is considered its controller and is responsible for secure handling and storage of the data. Unless otherwise agreed in advance, the student destroys the data and any registers after the project is completed.
If the commissioner wishes to use the data after the thesis is completed, this must be agreed upon before data collection begins. In such cases, ethical and appropriate practices must be followed, including clear prior communication with participants about the entire data lifecycle and its intended use. If personal data is transferred, it must comply with personal data legislation.