Category: News

Posted on

EDPB: Legal study on the appropriate safeguards under Article 89(1) GDPR for the processing of personal data for scientific research

https://edpb.europa.eu/system/files/2022-01/legalstudy_on_the_appropriate_safeguards_89.1.pdf

Includes detailled assessment of the additional rules per EEA state.

“The results of this study show that certain harmonisation exists among EEA States with respect to appropriate safeguards for scientific research, as required by the GDPR. However, a conundrum of various bodies of law and (ethical) guidelines regulate scientific research in specific areas, such as biobanking, health, epidemiology, social benefits, artificial intelligence and statistics. In turn, this makes the legal framework for sectoral research to remain fragmented.”

Posted on

EDPB: Legal study on Government access to data in third countries

https://edpb.europa.eu/our-work-tools/our-documents/legal-study-external-provider/legal-study-government-access-data-third_en

From the conclusion:

  • The present study preliminarily investigates the general situation of China, India and Russia concerning
    fundamental rights and freedoms, [..]

  • In relation to China, it can be seen that the Chinese legal system does not provide sufficient safeguards
    for foreigners’ data comparable to those found in the EU. Based on insights from the analysis of the
    People’s Republic of China (PRC) Constitution it is clear that government access to personal data is not
    constrained. [..]

  • In relation to India, it should be noted that the right to privacy was recognised only recently by the Indian
    Supreme Court. In close connection, also the right to personal data has received more attention.
    However, the Indian government has a track record of infringing both rights extensively. After careful
    assessment of relevant Indian legislation (Information Technology Act – IT Act, several IT Rules and
    Aadhaar Act), it may be concluded that these regulations foresee widespread exemptions for
    governmental access to personal data.[..]

  • In relation to Russia, it can be concluded that Russian data protection law is a complex matter. Although
    the formal legislative framework seems comprehensive, the enforcement and the application of the
    legislation has serious drawbacks. In addition, Russia has a striking record of violating the European
    Convention of Human Rights (ECHR) related to other related rights and freedoms, such as the freedom
    of expression [..]