The European Data Protection Board (EDPB) issued a paper clarifying some of the GDPR’s implications on processing personal data for health-related research, in response to the European Commission’s questions on this topic.
The document discusses the GDPR legal bases for processing health data for scientific research, secondary processing of health data, the notion of “broad consent”, transparency and data retention, and anonymization and pseudonymization.
The EDPB clarified that this is a preliminary document that offers a partial, rather than a comprehensive, overview of the topic. The EDPB indicated that the questions posed by the EU Commission require a deeper review and that the entire topic will be addressed in the EDPB’s guidelines on processing personal data for scientific research purposes, due later this year.
CLICK HERE to read an overview of the key issues arising from the EDPB’s document.
CLICK HERE to read the EDPB Document in response to the request from the European Commission for clarifications on the consistent application of the GDPR, focusing on health research.