On February 2, 2021, the European Data Protection Board (“Board”) responded to questions submitted by the European Commission (“Commission”) on the application of the General Data Protection Regulation (“GDPR”) to health research. The Board also announced that it is currently working on guidelines on the processing of personal data for scientific research purposes, which it aims to publish in the course of 2021.
Continue Reading European Data Protection Board Answers Commission’s Questions on Health Research
Health data
New German Legislation Facilitates Scientific Research in the Health Sector
On March 28, 2020, the “Federal Act for the Protection of the Population against an Epidemic of National Significance” (Bevölkerungsschutzgesetz) went into effect. The law forms part of an emergency legislative package introduced by the German government in response to COVID-19.
The law amends the Social…
Continue Reading New German Legislation Facilitates Scientific Research in the Health Sector
German Authorities Issue Guidance Related to Coronavirus
Over the past several days, Germany Supervisory Authorities and health authorities have issued statements and guidance about the handling of personal data in the context of the ongoing COVID-19 pandemic. In this blog, we consider some these statements in greater detail, as well as their implications for employers and employees.
Continue Reading German Authorities Issue Guidance Related to Coronavirus
Council of Europe issues recommendation on health-related data
On March 28, 2019, the Council of Europe* issued a new Recommendation on the protection of health-related data. The Recommendation calls on all Council of Europe member states to take steps to ensure that the principles for processing health-related data (in both the public and private sector) set out in…
Continue Reading Council of Europe issues recommendation on health-related data
Dutch Supervisory Authority Imposes GDPR Security Standard for Processing Broadly Defined Health Data
In early November, the Dutch Supervisory Authority released an injunction imposed against the public insurance body Uitvoeringsinstituut Werkgeversverzekering (“UWV”) last July.
The UWV allows employers to submit data about their employees for social security purposes. The data includes dates of employee absences due to general illness (and when an employee…
Continue Reading Dutch Supervisory Authority Imposes GDPR Security Standard for Processing Broadly Defined Health Data