The purpose of this section is to guide the one who register project information towards the correct place for registration. Project information is registered at three different instances:

  • RETTE:
    • The project information is registered here if the project is executed at UiB.
    • If the project is registered at NSD, the project information is automatically transferred to RETTE. You will be notified if a project is imported to RETTE from NSD.
    • If an application for research approval is sent to REK, the basic project information is transferred to RETTE when the project is approved at REK. You will receive an email if you need to provide more information in RETTE.
  • REK:
    • All projects regarding research on health must be approved by REK. The basic project information will be transferred automatically to RETTE.
  • NSD:
    • If you need assistance from the data protection official, or there is need for a data protection impact assessment (DPIA), the project must be registered at NSD. Project information is transferred automatically to RETTE.

You do not need to register project information in RETTE if the project is already registered at NSD. If you apply for research approval at REK, you must provide RETTE with the correct information after the project is approved by REK.

Your projects

  • ID

    • The ID is a code generated by RETTE.

    • REK is the REK-number.

    • NSD is the NSD-ID for the project.

    • If the REK-number or NSD-ID do not exist, the field will contain a dash, -.

  • Name
    • This is the project's name.
  • Status
    • Here is a description of the current status of the project registration.
  • Type
    • This is the type of project.
    • If the project is imported from Cristin, the project is automatically registered as health research.
  • Responsibility
    • This is a description of which unit at UiB is responsible for the project.
  • Created by
    • This is the name of the person who registered the project in RETTE.


This is where the basic information is registered; name, project description, the purpose of processing personal data, and if the personal data are going to be processed in other projects than this.


This is where one must specify the type of the project. If medicine/health research is chosen, the REK-number must be confirmed. If there is no application to REK, the user must choose “Research project” as type.


This is where one must choose which faculty or institute is responsible for the project. In addition, a project manager must be appointed. If the responsibility for processing personal data is shared by more than one institution, this must be specified here.

Personal data

This is where one must specify which types of personal data is being processed in the project.

Special categories

If there are special categories of personal data that is being processed in the project, one must specify them here.


This is where the sample is described:

  • Which types of persons are in the sample?
  • Age?
  • Will the selection receive custom information (e.g. if the sample consists of persons under the age of 18, or persons that are not able to give consent)?
  • How is the data collected?
  • Is the personal data collected directly from the sample?
  • Does the sample receive information regarding the processing of personal data?
  • How is the sample informed?

Third persons

If personal data from a third person is processed, one must specify which type of information is being processed, if the third person consents to the processing of the personal data, and if the third person receives information about the processing of the personal data.


This is where the amount of subjects whose personal data will be processed will be specified, and whether they have the capability to give consent.


This is where the statutory authority to process personal data is specified. In addition, one must specify if a data protection impact assessment (DPIA) is executed. A DPIA is only mandatory for research projects where the processing of personal data is regarded high-risk. DPIA is not mandatory for student projects.


This is where the description regarding the processing of personal data, and whom has access/is processing the data, is specified. In addition, one must specify whether the data is accessible outside of the EU/EEA.


This is where one must specify how the personal data is secured.


This is where one must specify the duration of the project, and what is done with the personal data when the project is terminated.


If there is a deficiency of information, this will be specified under the section “Problems”.

Edit this page