How to write an informed consent form 

Informed consent is commonly used as the legal basis to collect personal data in research. Explicitly asking participants whether their personal data can be collected for a particular purpose, gives them an opportunity to be informed, ask questions, and decide whether they wish to participate. By giving participants information and choice, you can fulfill both your legal and ethical requirements - that is, if you adequately formulate your informed consent forms.  

Information sheet 

When you collect personal data, it is crucial to inform participants about how you are using their data. You should at the very least describe: 

  • Your research and your team. 
  • The data you are collecting and how you are using it. Describe explicitly intents to make data available for reuse. 
  • Participants’ rights, for example the right to withdraw consent and to contact the university's Data Protection Officer. 
  • Additional information in special cases, for example if you are sharing data outside of the European Economic Area, or if you apply automatic decision making in your project. 

In this document, you can find an overview of information that you need to include in your information to participants. Please note that this is a general template and there may be additional requirements imposed by your faculty and/or Ethical Review Board.  

How to present the information 

The information you provide should be easily understandable and accessible for your participants. So try to include concrete and active language, and consider whether text is the most suitable way to deliver the information (other formats such as audio and video are also allowed). The GDPR also permits layering information to improve readability: you can place the most relevant information in the information sheet preceding the consent and provide external links to pages that contain additional information. The additional information may provide participants with a more detailed breakdown of how their data will be processed, or include the way in which the data will be de-identified, or information on the security of the tools and technologies to be used. An external website with additional information can also be used to inform participants of small changes to the processing that may occur after consent. 


To ensure consent is valid, you need to ensure that it is “freely given, specific, informed and unambiguous”, signified by a “clear, affirmative action” (Art. 4 GDPR):