When researching, be aware of whether you process personal information. If you do, you must comply with the data protection rules. You should also note that you are subject to the rules if you process personally identifiable information or information that is not considered anonymised in the sense of the data protection law.
A distinction is primarily made between general and sensitive personal information – and when processing one or the other kind (or both at the same time), you must comply with the rules. You can see an overview of typical general and sensitive/confidential information here. If you are in doubt as to whether you process personal information, you can contact SDU RIO, and if you have general questions about the handling of data in research projects, you can contact RDM support (Research Data Management).