Purpose Definition as a Crucial Step for Determining the Legal Basis Under the GDPR in Research
The General Data Protection Regulation (GDPR) of the European Union came into force in 2018, replacing the Data Protection Directive 95/46/EC. Under the new Accountability Principle of the GDPR, controllers (i.e., parties determining the purposes and the means of the processing of personal data) are responsible for ensuring and demonstrating the overall compliance with the Regulation. However, interpretive uncertainties inherent in the GDPR means that controllers must exercise considerable judgement in designing and implementing an appropriate compliance strategy, making GDPR compliance both complex and resource-intensive. In this article, we seek to provide conceptual clarity around GDPR compliance, focusing our analysis on organizations routinely using personal data for scientific research, such as biomedical or health research reliant on pseudonymized data. Our analysis is centred on the critical importance of purpose specification: i.e., delineating and describing, in appropriate level of detail, the purposes for which the researcher intends to process personal data. We offer actionable guidance for correctly specifying purposes of data processing under different research scenarios. To illustrate the practical usefulness of purpose specification, we subsequently show how our proposed approach can enable controllers to meet their compliance obligations, using the example of compliance with the overarching GDPR principle of lawfulness
Year of publication: |
[2023]
|
---|---|
Authors: | Becker, Regina ; Chokoshvili, Davit ; Thorogood, Adrian ; Dove, Edward ; Molnar-Gabor, Fruzsina ; Ziaka, Alexandra ; Tzortzatou-Nanopoulou, Olga ; Comandé, Giovanni |
Publisher: |
[S.l.] : SSRN |
Saved in:
Extent: | 1 Online-Ressource (47 p) |
---|---|
Type of publication: | Book / Working Paper |
Language: | English |
Notes: | Nach Informationen von SSRN wurde die ursprüngliche Fassung des Dokuments June 9, 2023 erstellt |
Other identifiers: | 10.2139/ssrn.4474344 [DOI] |
Source: | ECONIS - Online Catalogue of the ZBW |
Persistent link: https://www.econbiz.de/10014347475
Saved in favorites
Similar items by person
-
Doing away with inequality in loss of enjoyment of life
Comandé, Giovanni, (2009)
-
Consent Processes for Mobile App Mediated Research : Systematic Review
Moore, Sarah, (2018)
-
Reflections on the Concept of Open Data
Dove, Edward, (2017)
- More ...