General Data Protection Regulation (GDPR) raises the standard required of researchers handling personal data. For researchers, it is still essential to be aware of and follow the best practices in their field or discipline. In addition, researchers now need to also identify the appropriate legal basis for data processing.