The UvA is currently investigating what these risks mean for the use of Qualtrics within the University. You can continue to use Qualtrics. However, it is important to take extra care when handling personal data and storing your data.

What can you do?

• Only collect data that you really need. For example, do not ask for a name or email address if this is not necessary for your research.
• Do not automatically assume that data is anonymous. Sometimes, responses or combinations of data can still be traced back to an individual.
• Store exported data securely. Use a secure storage location approved by the UvA and only share files with people who need them for the research.
• Delete data from Qualtrics once your survey has been completed and you have securely stored the data in the appropriate location.

Qualtrics is intended for collecting research data, not for long-term storage.

What is the UvA investigating?

SURF advises Dutch universities not to use Qualtrics because of privacy risks. The UvA is therefore carrying out a Data Protection Impact Assessment (DPIA) to investigate what personal data is processed through Qualtrics, where it is stored and what additional security measures are needed. Based on the findings, the UvA will determine the conditions under which Qualtrics can be used safely.

More information will be provided once the findings are available.