The data protection directive of the EU was set up to allow the freedom of movement of people between member states. This has the consequence of allowing the freedom of transfer of data between member states in research. The paper discusses three cases discussed during the project to see whether RECs can refuse research based on concern for data protection in some member states. Since the directive is not, as commonly thought, intended to protect the rights and freedoms of individuals - something which is the function of the Data Protection Acts of individual states, Member States do not have a right to prohibit research based on data laws. One must express concerns directly to Brussels. Conversely it is debated whether some research considered unlawful in one particular member state can be refused by this same state.