Ethics and Integrity

The University of Lincoln’s Code of Practice for Research provides a comprehensive framework for good research conduct and the governance of all research carried out across the University.

The Code of Practice for Research sets out the principles governing the conduct of research by individual researchers and the University; and lists the fundamental standards for good practice in research with which both researchers and the institution should comply. 

The University of Lincoln’s Research Ethics Policy is intended to support good conduct in research, in order to encourage research of the highest quality. It provides general principles and standards for good ethical practice in research, for the individual researcher (staff member or student) and the institution as a whole.

The University of Lincoln seeks to:

• foster a culture within the University that embraces the principles set down in this policy and relevant legislation to protect the rights, dignity and welfare of those involved in research (whether they are participants, third parties, animals (or other living organism) or staff and students);
• provide ethical guidance that communicates regulatory requirements and best practice, and offer ongoing support and training to researchers to maintain high ethical standards; and
• maintain a review process that subjects research to a level of scrutiny in proportion to the risk of harm or adverse effect.

The University Research Integrity and Ethics Committee (URIEC) has oversight of the principles and practices of ethical research conduct across the University, specifically the Human and Non-Human Research Ethics Committees. It works in unison with the Research Committee to ensure that the Human/Non-Human Research Ethics Committees are supported to implement, monitor, and report on the ethical research conduct in their respective disciplines. For more information about the University of Lincoln’s governance structure, visit the Committee Structure page.

Further information regarding research ethics, or the research ethics application process, may be found on the University's Research Ethics portal page or by emailing ethics@lincoln.ac.uk.

The Human Tissue Authority (HTA) was set up to regulate the removal, storage, use, and disposal of human bodies, organs, and tissue for a number of scheduled purposes. These include research, education, and training, and are set out in the Human Tissue Act 2004 (HT Act).

In order for the University to store human tissue or hold human tissue material for research purposes, including cadaveric material, or to hold material for anatomical examination or teaching purposes, the institution requires a licence. The University of Lincoln holds a Human Tissue Authority Licence (Research #12678).

The Corporate Licence holder is the University of Lincoln. The Designated Individual (DI) is Professor Jon Whitehead.  

The Human Tissue Oversight Group (HTOG) ensures its compliance with the Act under the terms and conditions of its license.

Further information regarding the storage or use of Human Tissue may be found on the University's Human Tissue portal page or by emailing HTOG@lincoln.ac.uk.

The University of Lincoln expects all staff, students, and non-members conducting research on University premises to observe the highest standards of ethics and integrity. The Deputy Vice Chancellor for Research and Innovation has overall responsibility for research integrity, and the University’s Procedure for the Investigation of Misconduct of Research (UKRIO) outlines the steps to follow in potential cases of research misconduct.

You can our Annual Statement on Research Integrity below:

Annual Statement of Research Integrity 2023/24

Anyone wishing to raise concerns about the integrity of research can do so in confidence by contacting:

• Professor Richard Barnes (UKRIO Named Person): rbarnes@lincoln.ac.uk
• Professor Ruth Gaunt (UKRIO Alternate Named Person): rgaunt@lincoln.ac.uk

Further information can be found on the Research Misconduct portal page. Alternatively, you can email ethics@lincoln.ac.uk.

Privacy Notice for Research Participants

The University privacy notice for research participants should be read in conjunction with a participant information sheet made available to you by the research study you are taking part in. This contains details about the personal information collected for the particular project that concerns you.

The University of Lincoln (We) aim to conduct research to the highest standards of research integrity. Our research outcomes are in the public interest.

As part of our commitment to research integrity, we follow the UK General Data Protection Regulation (UK GDPR) and the UK Data Protection Act 2018 (DPA), (hereafter referred as UK data protection law). In the case of health and care research, we also follow the UK Policy Framework for Health and Social Care Research.

We promise to respect the confidentiality and sensitivity of the personal information that you provide to us, that we get from other organisations, and that we share with other collaborating organisations (such as other Universities or our research funders). We will tell you how we will use your information, how we will keep it safe and who it will be shared with. We commit to keeping your personal information secure and will not use it to contact you for any other purpose unless you have agreed to this.

Research has a special status under UK data protection law. Research conducted by our staff and postgraduate research students (those studying for a PhD or Masters in Philosophy) is defined as making an original contribution to knowledge which is published in order to share that knowledge.

Research projects may also be conducted by undergraduate and taught postgraduate (Masters in Arts / Science etc.) students to fulfil the requirements of their programme of study. Although these projects are not intended to make an original contribution to knowledge, nor are they usually published, they are essential to the student’s education and are therefore included under our definition of research.

We are usually the Data Controller for research studies. This means that we will decide how your personal information is created, collected, used, shared, archived, and deleted(processed). When we do this, we will ensure that we collect only what is necessary for the project and that you have agreed to this. If any other organisation will make decisions about your information, this will be made clear in the participant information sheet provided to you.

If more than one organisation works together on a project, there may be two or more Data Controllers for a specific project. If this happens, the organisations will have agreements in place which outline their responsibilities and details of this will be make clear in the Participant Information Sheet, provided to you.

Information About You

‘Personal data’ means any information which can identify you. It can include information such as your name, gender, date of birth, address / postcode, or other information such as your opinions or thoughts. It can also include information which makes it possible to identify you, even if your name has been removed (such as quotes or social media postings).

We will only ever collect personal information that is appropriate and necessary for the specific research project being conducted. The specific information that we will collect about you will be listed in the Participant Information Sheet, given to you by the research team.

We may process some information about you that is considered to be ‘sensitive’ and this is called ‘special category’ personal data. This includes, but is not limited to, information such as your ethnicity, sexual orientation, gender identity, religious beliefs, details about your health or past criminal convictions. These types of personal information require additional protections, particularly in relation to sharing, which the University ensures are in place.

Under UK data protection law we must have special safeguards in place to help protect your rights and freedoms when using your personal information and these are:

• Policies and procedures that tell our staff and students how to collect and use your information safely.
• Training which ensures our staff and students understand the importance of data protection and how to protect your data.
• Security standards and technical measures that ensure your information is stored safely and securely.
• All research projects involving personal data are scrutinised and approved by a research ethics committee in line with University policies and procedures.
• Contracts with companies or individuals not associated with the University have confidentiality clauses to set out each party’s responsibilities for protecting your information.
• We carry out data protection impact assessments on high-risk projects to ensure that your privacy, rights as an individual or freedoms are not affected.
• If we use collaborators outside of the UK, we will ensure that they have adequate data protection laws or contractual mechanisms for international transfers have been put in place.

In addition to the above University safeguards the UK GDPR and the DPA also require us to meet the following standards when we conduct research with your personal information:

(a) the research will not cause damage or distress to someone (e.g., physical harm, financial loss or psychological pain) and will be subject to ethical review by a university research ethics committee.

(b) the research is not carried out in order to do or decide something in relation to an individual person or their care, unless the processing is for medical research approved by a research ethics committee.

(c) the Data Controller has technical and organisational safeguards in place (e.g. appropriate staff training and security measures).

(d) if processing a special category of data, this must be subject to a further public interest test to make sure this particularly sensitive information is required to meet the research objectives.

The Legal Part

Data protection law requires us to have a valid legal reason to process and use personal data about you. This is often called a ‘legal basis’. UK GDPR requires us to be explicit with you about the legal basis upon which we rely in order to process information about you.

For research the legal reason is “Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller”(Article6oftheUKGDPR):

For sensitive information the legal reason is: “the processing is necessary for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes... which shall be proportionate to the aim pursued, respect the essence of the right to data protection and provide for suitable and specific measures to safeguard the fundamental rights and the interests of the data subject”. (Article 9 of the U K GDPR).

When research involves criminal convictions, the legal reason is listed in Schedule 1 of the Data Protection Act 2018 which requires that special safeguards are in place.

Where we need to rely on a different legal reason, such as consent, this will be listed in the Participant Information Sheet provided to you. In clinical trials or medical studies, for example, we may use the following reason:

“Processing is necessary for the purposes of preventive or occupational medicine, for the assessment of the working capacity of the employee, medical diagnosis, the provision of health or social care or treatment or the management of health or social care systems and services on the basis of Union or Member State law or pursuant to contract with a health professional and subject to the conditions and safeguards”.

We may also use your personal information for additional research purposes, such as other analysis or future projects on the same research topics. This is known as a secondary use or purpose.

If we want to do this it will be explained to you in the Participant Information Sheet and we will ensure that your information will not be used in ways which might have a direct impact on you (such as damage or distress) or will lead to decisions being made about you.

Sharing Your Information

Your personal information will be kept confidential at all times and researchers are asked to de-identify it (anonymise), pseudonymise (remove any information which can identify you such as your name and replace this with a unique code or key) or delete it as soon as possible. However, in some cases it may not be possible to de-identify your information as it is necessary in order to achieve the aims of the research. If this is the case you will be informed of this in the Participant Information Sheet.

Your personal information as well as any de-identified information will only be shared with members of the research team in order to conduct the project. If they need to share your information with anyone else including anyone outside of the UK, you will be told who they are and why this is the case in the Participant Information Sheet.

We also sometimes use products or services provided by third parties to conduct research activities or share research data, such as Microsoft collaboration products e.g. OneDrive Teams, Forms, JISC online surveys, or other online communication tools. These third parties are known as data processors and when we use them, we have agreements in place to ensure your information is kept safe. This does not always mean that they access your information but if they do this will be outlined in the Participant Information Sheet. As Data Controller, we will always carry out due diligence in respect of the use of third parties in order to keep your information safe throughout the research.

We will only keep your personal information for as long as necessary to complete the aims of the research. However, some personal information (including signed records of consent) will be kept for a minimum amount of time as required by external funders or our policies and procedures.

Your personal information will be deleted from our systems:

• Once it is no longer relevant for us to contact you
• You decide you do not wish to take part
• As advised in the relevant PIS

Research data (including signed records of consent) will be kept for a minimum of 5 years (this will be anonymised or pseudo-anonymised) after the research is completed except:

• where funded by the Medical Research Council (30 years after research completion)
• where stipulated to be longer by the funding body or other constraints.

If you access additional University services these may keep a record of your contact and will provide you with details of how long they keep your information.

For some research projects, your de-identified or pseudonymised information will be kept after the project has ended, placed into a data repository / online archive for sharing with other researchers or used in future research. If the researchers would like to do this with your information you will be told in the Participant Information Sheet.

When using research repositories, researchers are often required to upload their supporting or underlying data which may be identifiable or sensitive. The repositories have technical controls in place to ensure that only authorised individuals can access the information.

Obtaining Information About You From Other Organisations

On occasion, other organisations share personal information about you with our research teams, your information is treated in the same way as the information we collect directly from you in accordance with appropriate laws and technical standards. The suppliers of this data are usually official bodies, such as NHS Digital, NHS England, the Home Office, or the Department of Education.. When your data is supplied by those organisations, our research teams will publish privacy information on dedicated websites.

Your Rights

By law, you have rights in relation to the personal information we hold about you. These include the right to:

• See the information/receive a copy of the information;
• Correct any inaccurate information;
• Have any information deleted;
• Limit or raise concerns to our processing of the information;
• Move your information (“portability”).
• Request human intervention when automatic decision making or profiling is carried out. You will be informed if either of the above applies to your personal information.

These rights only apply to your information before it is anonymised as once this happens we can no longer identify your specific information. Sometimes your rights may be limited if it would prevent or delay the research. If this happens you will be informed by the research team but you still have rights to complain to our Data Protection Officer and if you are still not satisfied you also have the right to complain about this to the Information Commissioner.

In some instances, we may have asked for your consent to use your personal information for research purposes (e.g. to contact you to take part in future research). If we asked for your consent, you can withdraw this at any time; you should have already been told how to do this but if not, or if you are in doubt, please use the contact details below. Please note that your consent to use your personal information is separate from your ethical consent to participate in a particular research study (which we usually request for relevant types of research).

If you have any questions about how your personal information is used, or wish to exercise any of your rights, please consult the University’s data protection webpages. If you need further assistance, please contact the University’s Data Protection Officers, at compliance@lincoln.ac.uk or write to:

Information Compliance, Secretariat, University of Lincoln, Brayford Pool, Lincoln, LN6 7TS.

You can also make complaints directly to the Information Commissioner’s Office (ICO). The ICO is the independent authority upholding information rights for the UK. Their website is ico.org.uk and their telephone helpline number is 0303 123 1113.