The Cornell University IRB and Privacy Offices have developed this policy and procedure document on the impact of the European Union General Data Protection Regulation (GDPR) on research data collected from human participants. GDPR Research Guidance