Audience research
Part of Social media scheduling audience research: a protocol
Social media scheduling customer interviews: the data rules
Social media scheduling customer interviews need data rules first: choose a lawful basis, handle special category data, plan withdrawal, keep marketing apart.
Agreeing to be interviewed does not let a researcher keep, reuse or market from what a participant says. Social media scheduling customer interviews need their data rules settled before the first recording, because a transcript of a publishing routine is personal data once it names a person or an account. UK GDPR duties then apply.
What to take away
- Ethical consent to take part and a UK GDPR lawful basis are separate decisions, and the second needs its own record.
- The ICO says there is no single research basis, so each study records its own choice and reasoning.
- Disability or access needs mentioned in an interview can be special category data and need extra care.
- Tell people what happens to recordings before they agree, including how to withdraw.
- Keep the interview list apart from every marketing audience.
- Set access and deletion rules before recording, not after.
Why agreeing to an interview is not a lawful basis
Consent to take part in a study is an ethical agreement, not a lawful basis. The ICO's research guidance says needing people's consent to participate in a study does not mean consent is the most appropriate basis for processing their personal data.
Participation vs data use
Ethical agreement
- Purpose
- Informed consent to interview
- Necessity
- Not required
- Transparency
- Explain interview process
- Rights
- Withdrawal route
UK GDPR lawful basis
- Purpose
- Specific processing purpose
- Necessity
- Must demonstrate necessity
- Transparency
- Provide privacy notice
- Rights
- Data subject rights
The practical effect is that each interview needs two records. One covers the research ethics: information given, the incentive and the right to leave. The other covers the data: purpose, necessity, lawful basis, transparency and rights. A signed participation form can sit in the first record and still leave the second one empty.
Choose one basis and record why
There is no single research basis, so the choice depends on the study and who runs it. The ICO's list of choices includes consent, public task and legitimate interests. Record the reasoning for the one you pick, not just the label.
| Basis | Article | What to write down |
|---|---|---|
| Legitimate interests | Article 6(1)(f) | Purpose, why interviews are necessary, why participants' interests do not override it |
| Public task | Article 6(1)(e) | The task and its basis in law |
| Consent | Article 6(1)(a) | Use only if a withdrawal can be honoured in full, and how it stops the processing or anonymises the record |
Consent has a cost that shapes the whole design. Under the ICO's guidance, a withdrawal means stopping the use of that person's data, or anonymising it, straight away. Where that cannot be done in full, consent cannot be the basis. Pick the basis first, then build the withdrawal route to match it.
Check also whether the organisation has to register and pay the ICO's data protection fee. A controller processing personal data usually does, although some purposes are exempt, so confirm the position with the ICO's own guidance rather than assume it, and note the answer beside the lawful basis record.
When an interview touches special category data
Special category data can arrive unplanned. A participant explaining why they schedule posts in batches may mention a health condition, or ask for an adjustment such as extra time. In the ICO's guidance, disability counts as special category data where it reveals information about a person's health.
Research with special category data needs a condition under Article 9 as well as a basis under Article 6. For research, that means Article 9(2)(j) with the safeguards in Article 89. For a scheduling study, the simpler course is not to ask. Record access adjustments as logistics, without health detail, and take qualified advice before collecting such data on purpose.
Tell people before they agree
Transparency starts with the invitation. Name the researcher, commissioner, topic, reason for selection, time, incentive, recording plan and withdrawal route, and say which scheduling tools and platforms the conversation covers. Avoid implying that an employer expects participation, because that weakens a free choice to take part.
Candid invitation essentials
- Name the researcher and commissioner
- State topic and reason for selection
- Give time and incentive details
- Explain recording plan
- Provide withdrawal route
- Avoid implying employer expectation
Name the tools in scope too, for example Buffer, Hootsuite, Later or Sprout Social publishing to LinkedIn, Instagram, X, Facebook or TikTok.
Add the points an interviewee would otherwise have to ask for: who holds the recording, which lawful basis applies, how long it is kept and how to request access or deletion. If withdrawal is offered after the interview, state its practical deadline and what can still be removed. A participant who knows the deadline can use it.
Keep recruitment and marketing apart
An interview and a marketing message are different purposes, and the second needs its own footing. Do not add a participant to an email list or to a LinkedIn or Instagram retargeting audience because they accepted an interview. Apply the ICO's direct-marketing planning guidance to the actual channel first.
Email and similar messages also fall under the Privacy and Electronic Communications Regulations 2003 (PECR). A thank-you note that confirms the incentive belongs to the research. A newsletter offer does not. If a participant later asks to hear about a product, log that request as a fresh, separate choice, dated and kept outside the interview file.
Minimise, secure and delete
Collect the account, role and workflow details the decision needs: the tools and platforms a person uses, their approval steps and their posting cadence. Leave out customer lists and credentials. Where a live post would expose customers, use a synthetic example, so the talk stays concrete without other people's data.
Set access, encryption, transcript, deletion and incident responsibilities before recording, and name an owner for each. The ICO's appropriate safeguards guidance prioritises minimisation and discusses anonymous and pseudonymous data. Delete contact details, recordings and transcripts on the approved schedule, and keep a minimised audit record of recruitment and decisions.
Publish a quotation only where wording, context and attribution were authorised. If the interviews later feed buyer personas, carry roles and workflows into the persona, not names. A persona built from named people keeps the personal data alive long after the interview file is deleted.
Where the data rules sit in the wider study
These rules cover the interview itself and the records around it. Who to invite is a separate question: the audience research protocol covers sampling and populations, and defining the target audience covers eligibility by observable work.
Once the records are in place, interview findings feed a bounded decision: proceed to a synthetic workflow test, revise the eligible population, or stop. A vivid story is not an England prevalence estimate, and stated willingness is not a purchase. Weigh such stories against demand signals.
Before you record
- Record the lawful basis and its reasoning, separate from the participation agreement.
- Decide how a withdrawal will be actioned and state its practical deadline.
- Do not ask for health details; log access adjustments as logistics only.
- Keep the interview list out of every marketing audience.
- Name owners for access, encryption, deletion and incident response.
- Authorise quotations before publishing them.
Common questions
Is consent to be interviewed the same as a lawful basis?
No. Consent to take part is an ethical agreement, and the ICO says it should not be confused with UK GDPR consent. Needing it for participation does not make it the right basis for the data, so record the lawful basis separately, with its reasoning, first.
Is there one lawful basis for research interviews?
No. The ICO says there is no single research basis, and the choices include consent, public task and legitimate interests. Pick the one that fits the study, then record the purpose, why interviews are necessary and the reasoning, after qualified review.
Can interviewees be added to a mailing list afterwards?
Not because they took part. An interview and a marketing message are different purposes. Check the ICO's direct-marketing guidance for the actual channel, such as email or an audience on LinkedIn or Instagram, and treat any later sign-up as a separate, recorded choice kept outside the interview file.
