GDPR Disclosure

The General Data Protection Regulation (GDPR) is a series of laws that were approved by the European Union Parliament in 2016.   The purpose of the GDPR is to provide a set of standardized data protection laws across all the member countries.  OSF has taken several steps to comply with GDPR, including revising our Terms Of Use and Privacy Policy, ensuring GDPR compliance of third-party vendors, and reviewing policies and procedures for deleting user data.   A full GDPR deletion will permanently remove your personal information from OSF.  Write to support@osf.io with a request to delete your personal data.


What you may need to do:

  • If you have previously connected your ORCID to your OSF profile you may need to log back in with those credentials before erasure to ensure that the connection is entirely removed or revoke OSF authorization.
  • If you are the sole admin on an OSF Project, consider transferring admin permissions to another contributor.

A full GDPR deletion WILL permanently:

  • Remove your personal information from OSF, including your name and email addresses
  • Remove your name from OSF Search 
  • Remove your from all content metadata on the OSF
  • Remove your name from any activity logs and authorship on Project Wikis
  • Delete any draft preprints you are a sole admin contributor on
  • Delete any draft registrations you are a sole admin contributor on
  • Delete any private projects you are a sole admin contributor on

GDPR deletion WILL NOT:

  • Automatically delete any currently public content on the OSF (including public Projects, Registrations, or Preprints) - if you wish for these to be removed, login and delete OSF Projects and withdraw Registrations or Preprints 
  • Delete any embargoed Registrations, they will go public as scheduled with your name removed
  • Remove your name from any files in the OSF
  • Remove your name within a Project wiki
  • Remove your name from the metadata of a file on the OSF
  • Remove OSF-deposited works from your ORCID record
  • Remove archived content from Internet Archive to do that see these instructions 

Authorship information included in DOI metadata will remain under GDPR Article 17(3). This is considered public information

Did this answer your question? Thanks for the feedback There was a problem submitting your feedback. Please try again later.