National Institute of Demographic Studies (INED)

What happened

On the basis of Article 36 GDPR, the French DPA issued an opinion finding a scientific research survey project to be implemented by a data controller legitimate as its processing of sensitive personal data was necessary for scientific research purposes in the public interest.

Summary from GDPRhub (noyb), written by its volunteers, not by Fino. CC BY-NC-SA 4.0.

Rules involved

• Art. 5Principles relating to processing of personal data5(1)(f)Read →
• Art. 13Information to be provided where personal data are collected from the data subjectRead →
• Art. 14Information to be provided where personal data have not been obtained from the data subject14(5)(b)Read →
• Art. 32Security of processingRead →
• Art. 89Safeguards and derogations relating to processing for archiving purposes in the public interest, scientific or historical research purposes or statistical purposesRead →

• Data principles
• Data security
• Transparency