Implementing the European Union Data Protection Directive (Directive 95/46/EC) on the protection of individuals with regard to the processing of personal data and on the free movement of such data, the Danish Act on Processing of Personal Data provides the legal basis for private and public institutions to obtain individually identifiable health data for research purposes.
The registration of the personal data provided by individual staff members was reported to the Norwegian Social Science Data Services in accordance with national legislation.
According to the current Spanish law (Organic Law 15/1999 of 13 December), the personal data provided by the participants were stored and kept in a safe file, and real names were replaced by fictitious ones.
It is meant to complement the 2016 General Data Protection Regulation GDPRR) which provides a single set of rules for the protection of personal data and provides the basis for the free flow of such data.
A number of American privacy advocates, for example, have proposed creating some form of residual right over commercial reuse of personal data so that data provided in one setting (online sales, for example, or website visits) could not be sold or traded for further use without permission.
All participants provided written informed consent for the use of personal data and agreed to provide a blood sample that would be used for biological analyses and DNA extraction.
(1c) At the time of collection of personal data, the responsible authority shall provide the person concerned with the information required pursuant to Articles 12, 13 and 14 of Regulation (EU) 2016/679 in the manner required by those provisions.
This means very carefully limiting the collection of personal data to that needed to provide a service – rather than storing everything that can be conveniently retrieved.
The personal data officer is administered by the Data Inspectorate and approves notifications of use and storage of personal data, while the Datainspektion must provide a license when this is needed.
Facebook confirmed as much this week, when Gizmodo asked it to respond to a study by some US academics that showed how a piece of personal data that had never been knowingly provided to Facebook by its owner could still be used to target an ad at that person.
