What Are the Key Principles of GDPR Relevant to Epidemiology?
The GDPR outlines several principles that must be adhered to when processing personal data:
Lawfulness, fairness, and transparency: Data must be processed lawfully, fairly, and transparently. Purpose limitation: Data should be collected for specified, explicit, and legitimate purposes and not further processed in a manner incompatible with those purposes. Data minimization: Only data that is necessary for the research purpose should be collected. Accuracy: Personal data must be accurate and kept up to date. Storage limitation: Data should be kept in a form that permits identification of data subjects for no longer than necessary. Integrity and confidentiality: Data must be processed in a manner that ensures appropriate security.
