Guidelines 03/2020 on the processing of data concerning health for the purpose of scientific research in the context of the COVID-19 outbreak

SECTION 4  LEGAL BASIS FOR THE PROCESSING

15. All processing of personal data concerning health must comply with the principles relating to processing set out in Article 5 GDPR and with one of the legal grounds and the specific derogations listed respectively in Article 6 and Article 9 GDPR for the lawful processing of this special category of personal data.

16. Legal bases and applicable derogations for processing health data for the purpose of scientific research are provided for respectively in Article 6 and Article 9. In the following section, the rules concerning consent and respective national legislation are addressed. It has to be noted that there is no ranking between the legal bases stipulated in the GDPR.