Scientific, historical or statistical purposes

Overview

Country
Last reviewed
Scientific, historical or statistical purposes

Austria 05.06.2018 Sec 7 ADPA governs special provisions for the processing of personal data for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes:

Provided that the processing is not intended to result in a personalized outcome, it is admissible in case the used data is (i) publicly accessible, (ii) lawfully collected for other legitimate purposes or (iii) pseudonymised.

All other data processing activities for scientific, historical or statistical purposes require (i) a specific statutory authorization, (ii) the consent of the data subject or (iii) approval by the Austrian Data Protection Authority.

Since these provisions are quite restrictive, special regulations for certain areas (especially health-care and pharma sector) are currently in legislation process.
Belgium 17.05.2018 n/a
Czech Republic 16.05.2018 n/a
Denmark 22.05.2018 § 10 permits  processing of special category data and data related to criminal offences for statistical or scientific purposes  when necessary for reasons of substantial public interest and if necessary for the research;
§ 11(3) permits  processing of personal identification numbers by private organisations for statistical or scientific purposes; 
§ 22(5) restricts data subjects' rights in relation to statistical or scientific purposes. 
Finland 17.05.2018 Proposed Data Protection Act includes derogations and safeguards in accordance with Article 89 GDPR.  These mostly carry forward rules which already apply under the current Personal Data Act.  Processing for scientific, historical or statistical purposes is permissible as long as the safeguards in Article 89 GDPR and the proposed Data Protection Act are met.
France 22.05.2018 The New Data Protection Act adds a provision on the data subjects rights in case of processing for archiving purposes. The right of access, the right to rectification, the right to restriction of processing, the right to data portability and the right to object do not apply for this type of processing.
Germany 23.05.2018

§ 27 FDPA permits processing of sensitive data without consent: 
- for scientific or historical research; and 
- for statistical purposes 
if the processing is necessary for these purposes and the data controller’s interest to process data significantly outweighs the data subject’s interest. 
The data controller must apply certain "suitable and specific" measures. 

Provision also restricts data subjects' rights in the context of  processing for research and statistical purposes, and sets out  requirements for the publication of such data. 

§ 32-37  FDPA also contain other (general) restrictions of data subjects' rights on the basis of Art. 23 GDPR.

Hungary 17.05.2018 n/a 
Ireland  7.06.2018  Under section 42 of the Act, personal data may be processed for (a) archiving purposes in the public interest; (b) scientific or historical research purposes; or (c) statistical purposes, subject to suitable and specific measures being taken to safeguard the fundamental rights and freedoms of data subjects.
Italy 17.05.2018

Amended Section 99 IDPA, allows personal data to be processed; stored; & transferred to another controller after the normal period for processing of personal data and even after the termination of the main data processing if these processing will be carried out for scientific, historical or statistical purposes as well as at archiving in the public interest.

Amended Section 106 IDPA - the Italian DPA is to promote rules for professional and ethical conduct for processing for statistical purposes or for scientific research. Rules to apply both to public and private bodies, scientific societies and professional associations. Aim of the guidance is to 
identify adequate guarantees for the rights and freedoms of the data subject in accordance with Article 89 GDPR. 
 
Amended Section 110 IDPA: possible to carry out scientific and medical research, using special categories of data, without consent in certain circumstances. 
 
Amended Section 110-bis IDPA: ability for the Italian DPA to authorise secondary uses of special category data for scientific and statistical research, in situations where it is impossible or would involve a disproportionate effort to inform all  data subjects. Does not apply to genetic data. 

Netherlands 17.05.2018 Article 42 GDPR Execution Act provides that where processing takes place solely for scientific or historical research purposes, or statistical purposes, the controller may declare articles 15, 16 and 18 of the GDPR inapplicable. Data subjects will not have rights of access, rectification or restriction of processing for this data.
Poland 16.05.2018 n/a
Spain 16.05.2018

Article 25 - processing of personal data for statistical purposes:
a) will only be lawful only if the information is required by an EU rule or by the statistical programming rules;
b) Spanish Government Statistics Act : processing of special category data for statistical purposes must be based on express and voluntary consent of the data subject; 
c) If statistical secrecy guarantees under Spanish legislation apply, competent bodies for the public statistical function can deny  data subject rights in Articles 15 to 22 of the GDPR .
Article 26 -  processing of personal data for archiving purposes in the public interest is subject to the Spanish Historical Heritage Act and other related regulations.

Draft Bill does not provide information about the processing for scientific or historical research purposes. 

Sweden 22.05.2018 n/a
UK 22.05.2018

Sched.1, part 1, §4 Processing of special category data and criminal offence data for archiving purposes, scientific or historical research purposes, or statistical purposes permitted if:
- in accordance with GDPR (Art.81) (use of t.o.m.s and data minimisation; anonymise if possible; pseudonymise if possible); and
- must not be likely to cause damage or distress; must not be used for measures or decisions with respect to a particular data subject unless is approved medical research (s.19); and
- is in the public interest.

Exemptions from data subject rights (access; rectification; restriction; portability; right to object) where processing meets conditions set out in Art.89 (1) & s.19 DP Act; and
- compliance would prejudice the ability to achieve the purposes of the research/ statistics/ archiving; and
- for research/ statistics: the results must not be made available in identifiable form.