Skip to main page content
U.S. flag

An official website of the United States government

Dot gov

The .gov means it’s official.
Federal government websites often end in .gov or .mil. Before sharing sensitive information, make sure you’re on a federal government site.

Https

The site is secure.
The https:// ensures that you are connecting to the official website and that any information you provide is encrypted and transmitted securely.

Access keys NCBI Homepage MyNCBI Homepage Main Content Main Navigation
. 2020 May 29;6(2):e19279.
doi: 10.2196/19279.

COVID-19: Putting the General Data Protection Regulation to the Test

Stuart McLennan  1 , Leo Anthony Celi  2   3 , Alena Buyx  1
Affiliations

COVID-19: Putting the General Data Protection Regulation to the Test

Stuart McLennan et al. JMIR Public Health Surveill. .

Abstract

The coronavirus disease (COVID-19) pandemic is very much a global health issue and requires collaborative, international health research efforts to address it. A valuable source of information for researchers is the large amount of digital health data that are continuously collected by electronic health record systems at health care organizations. The European Union's General Data Protection Regulation (GDPR) will be the key legal framework with regard to using and sharing European digital health data for research purposes. However, concerns persist that the GDPR has made many organizations very risk-averse in terms of data sharing, even if the regulation permits such sharing. Health care organizations focusing on individual risk minimization threaten to undermine COVID-19 research efforts. In our opinion, there is an ethical obligation to use the research exemption clause of the GDPR during the COVID-19 pandemic to support global collaborative health research efforts. Solidarity is a European value, and here is a chance to exemplify it by using the GDPR regulatory framework in a way that does not hinder but actually fosters solidarity during the COVID-19 pandemic.

Keywords: COVID-19; EHR; GDPR; data sharing; digital health; electronic health records; global health; public health; research; research exemption.

PubMed Disclaimer

Conflict of interest statement

Conflicts of Interest: None declared.

References

    1. Cosgriff C, Ebner D, Celi L. Data sharing in the era of COVID-19. The Lancet Digital Health. 2020 May;2(5):e224. doi: 10.1016/S2589-7500(20)30082-0. doi: 10.1016/s2589-7500(20)30082-0. - DOI - PMC - PubMed
    1. Prainsack B, Buyx A. A solidarity-based approach to the governance of research biobanks. Med Law Rev. 2013 Jan 16;21(1):71–91. doi: 10.1093/medlaw/fws040. - DOI - PubMed
    1. Ienca M, Vayena E. On the responsible use of digital data to tackle the COVID-19 pandemic. Nat Med. 2020 Apr;26(4):463–464. doi: 10.1038/s41591-020-0832-5. http://europepmc.org/abstract/MED/32284619 - DOI - PMC - PubMed
    1. Wallis KA, Eggleton KS, Dovey SM, Leitch S, Cunningham WK, Williamson MI. Research using electronic health records: Balancing confidentiality and public good. J Prim Health Care. 2018;10(4):288. doi: 10.1071/hc18040. - DOI - PubMed
    1. The Lancet Respiratory Medicine Data protection: balancing personal privacy and public health. The Lancet Respiratory Medicine. 2016 Jan;4(1):1. doi: 10.1016/s2213-2600(15)00514-7. - DOI - PubMed

Publication types

LinkOut - more resources