In this Data Literacy Snack we delve into the basics of privacy and data protection laws while focusing on the ever so relevant General Data Protection Regulation (GDPR). This European regulation has provided one of the world´s strongest set of data protection rules: enhancing the rights of the data subjects while imposing legal obligations not only onto companies but onto every person or organization dealing with (collecting, processing) personal data. Some of the main questions discussed in our session included: what are the key data protection principles to observe in a research project and how to comply with them?