ORCID Privacy Policy
ORCIDs full privacy policy can be found in the following URL: https://info.orcid.org/privacy-policy. ORCID last updated their privacy policy in 2024.
Table of Contents
Data Protection
ORCID processing of personal data is subject to certain legal safeguards specified in applicable national and international data protection regulations, including but not limited to the EU and UK General Data Protection Regulation (GDPR) and US privacy laws.
Under the GDPR, ORCID is a ‘data controller’ for the personal data added by Record Holders, Trusted Individuals and Organizations, and for the information processed in order to operate and deliver services. They also act as a data processor when ORCID Member Organizations (such as the University of Waterloo) use the Member Portal to create and edit information about researchers.
Privacy Rights
Right to know and access : This right enables you to request that ORCID confirms whether they process your personal data and receive copies of your data if so, and to request information about our collection and use of your personal data, including whether they sell or share your personal information.
Right to request correction of personal data that we hold about you : This right enables you to have any incomplete or inaccurate information ORCID holds about you corrected.
Right to request erasure of your personal data (also known as the ‘right to be forgotten’) : This right enables you to ask ORCID to delete or remove personal data where there is no good reason for them continuing to process it. You also have the right to ask ORCID to delete or remove your personal data where you have exercised your right to object to processing.
Right to object to processing of your personal data : This right applies where ORCID is relying on a legitimate interest for using your data. You also have the right to object if they are processing your personal data for direct marketing purposes.
Right to request the restriction of processing of your personal data : This right enables you to ask ORCID to suspend the processing of personal data about you, for example if you want them to establish its accuracy or the reason for processing it.
Right to data portability : This right enables you to request and obtain a copy of your personal data that you previously provided to ORCID in a portable format. This right also gives you the right to request that ORCID transmits this data directly to another data controller.
Right to opt out of the sale and sharing of personal data : This right enables you to opt out of the processing of your personal data for the purpose of selling or sharing your personal information for cross -context behavioral advertising. Note that ORCID does not sell your personal information, nor do they share any data with direct marketers.
Right to opt -out of the use of Personal Data for targeted advertising and profiling : This right enables you to opt out of the processing of your personal data for purposes of targeted advertising or profiling in furtherance of decisions that produce legal or similarly significant effects concerning you. Note that ORCID does not use your data for targeted advertising or profiling purposes.
Right to limit use and disclosure of sensitive personal data : This right enables you to request that ORCID limits the ways they use and disclose your sensitive personal data to uses which are necessary for them to perform our services.
Right to non -discrimination : This right ensures you are not discriminated against in the services or quality of services you receive from us for exercising your rights. ORCID will not discriminate against you for exercising any of your rights in this section including denying goods or services, charging different prices or rates for goods or services, or providing a different level of quality of goods and services.
Right to appeal : This right enables you to appeal ORCIDs denial of any request you make under this section. To exercise your right to appeal, please submit an appeal request by contacting our Data Protection Officer at privacy@orcid.org.