EDPB: Legal study on the appropriate safeguards under Article 89(1) GDPR for the processing of personal data for scientific research


Includes detailled assessment of the additional rules per EEA state.

“The results of this study show that certain harmonisation exists among EEA States with respect to appropriate safeguards for scientific research, as required by the GDPR. However, a conundrum of various bodies of law and (ethical) guidelines regulate scientific research in specific areas, such as biobanking, health, epidemiology, social benefits, artificial intelligence and statistics. In turn, this makes the legal framework for sectoral research to remain fragmented.”