Addressing the importance of General Data Protection Regulation (GDPR) and data management guidelines when collecting data for research work is essential. Instructions for managing personal data e.g. in thesis work can be provided by institutional level.
Educator can ask students to familiarize themselves with instructions and make sure, that instructions are taken into account before student is starting to collect the data. If students are collecting data within institution, committing to handling the information in accordance with legislation on handling personal information and privacy protection should be part of the research permit applied.
Research permit templates and applications can be offered for students to modify for their use.
Complete guide to GDPR compliance: https://gdpr.eu/
GDPR for Education: A guide to GDPR for universities (microsoft.com)
Research permits: Research permits – Laurea-ammattikorkeakoulu
Data Management Guidelines – Finnish Social Science Data Archive (FSD) (tuni.fi)