Supporting data for "DAISY: a Data Information System for accountability under the General Data Protection Regulation"

The new European legislation on data protection, namely the GDPR, has introduced comprehensive requirements for the documentation about the processing of personal data as well as informing the data subjects of its use. GDPRs accountability principle requires institutions, projects and data hubs to document their data processings and emonstrate compliance with the GDPR. In response to this requirement, we see the emergence of commercial data mapping tools, and institutions creating GDPR data registers with such tools. One shortcoming of this approach is the genericity of tools, and their process-based model not capturing the project-based, collaborative nature of data processing in biomedical research. <br>We have developed a software tool to allow research institutions to comply with the accountability requirement and map the sometimes very complex data ows in biomedical research. By analysing the transparency and record keeping obligations of each GDPR principle we observe that our tool e ectively meets the accountability requirement.<br>The GDPR is bringing data protection to the center stage in research data management; necessitating dedicated tools, personnel and processes. Our tool, DAISY, is tailored speci cally for biomedical research and can help institutions in tackling the documentation challenge brought about by the GDPR. DAISY is made available as a free and open-source tool on Github. DAISY is actively being used at the Luxembourg Centre for Systems Biomedicine and the ELIXIR-Luxembourg data hub.