Article on Conflict of Interest and DPO (Data Protection Officer) COI types

Bloomberg Law article at https://news.bloomberglaw.com/privacy-and-data-security/insight-avoiding-conflicts-of-interest-in-selecting-a-data-protection-officer

Discusses three DPO COI types:

  • The “DPO–Boss”
  • The “I-Trust-Myself DPO”
  • The “DPO of All Trades” (and Master of None?)

build on guidance by

  • European Data Protection Board
  • State Data Protection Commissioner of Baden-Wuerttemberg
  • Danish Datatilsynet
  • Information Commissioner’s Office
  • Belgian Gegevensbeschermingsautoritei

France/CNIL: Health Data Processing: How to distinguish between a health datapool and research and what are the consequences?

When the creation of a database containing health data is envisaged, the controller must determine whether it will allow the subsequent completion of several treatments (“warehouse”) or if it is a research, study or ad hoc evaluation. Depending on this choice, the legal regime and the formalities to be performed are different.

https://www.cnil.fr/fr/traitements-de-donnees-de-sante-comment-faire-la-distinction-entre-un-entrepot-et-une-recherche-et