EU Commission – Question and Answers on the interplay between the Clinical Trials Regulation and the General Data Protection Regulation
CNIL – Annual Report for 2018
Austria: Patient cannot consent to inadequate TOMs
Data subjects cannot consent to inadequate technical and organizational measures, in the specific case to unencrypted emails.
https://www.dataprotect.at/2019/04/16/datensicherheitsma%C3%9Fnahmen-sind-nicht-disponibel/