EDPB announces scope of upcoming guidance on data processing in the fight against coronavirus (COVID-19)

EDPB announces scope of upcoming guidance on data processing in the fight against coronavirus (COVID-19)

During its 20th plenary session, the European Data Protection Board (EDPB) assigned concrete mandates to its expert subgroups to develop guidance on several aspects of data processing in the fight against the coronavirus. This follows the decision made during the EDPB's 19th plenary session.

The EDPB will issue guidance on the following topics:

• geolocation and other tracing tools in the context of the coronavirus outbreak, in particular focusing on:

○ the use of aggregated / anonymised location data (eg provided by telecom or information society service providers) and the effectiveness of aggregation and anonymization techniques

○ the application of the principles of lawfulness, necessity, proportionality, including accuracy, and data minimisation to the different means available to gather location data or trace interactions between data subjects

○ general legal analysis of the use of apps and collection of personal data by apps to help contain the spread of the virus

○ the required safeguards to ensure the respect of data protection principles, including with regard to data retention, in the context of using geo-location or other tracing tools

○ the identification of recommendations or functional requirements for contact tracing applications

○ the necessity to subject the measures taken to a pre-defined timeframe limited to what is strictly necessary to tackle the emergency situation

• processing of health data for research purposes in the context of the coronavirus outbreak, in particular on the following issues:

○ processing of health data for the purpose of advancing scientific and medical research connected to the coronavirus crisis; legal basis, principle of proportionality, information and exercise of the rights of data subjects (right to object, right to erasure, etc), retention period, etc

○ re-use of medical research data connected to the coronavirus crisis and data sharing

○ information and exercise of the rights of data subjects in an emergency situation

Considering the high priority of these two topics, the EDPB decided to postpone the guidance work on teleworking tools and practices in the context of the coronavirus outbreak (previously announced by the EDPB, see: EDPB to issue data processing guidance amid coronavirus (COVID-19) crisis, LNB News 06/04/2020 12​), for the time being.

Sources:

• Twentieth plenary session of the European Data Protection Board - scope of upcoming guidance on data processing in the fight against COVID-19

• Mandate on the processing of health data for research purposes in the context of the COVID-19 outbreak

• Mandate on geolocation and other tracing tools in the context of the COVID-19 outbreak

Subscription Form

Related Articles:
Latest Articles:

Access this article and thousands of others like it free by subscribing to our blog.

Read full article

Already a subscriber? Login