Duty LXD-8307
Processes de-identified data, in Estonia
Personal Data Protection Act, pseudonymised data for research and official statistics (Section 6)since 3 lines
Isikuandmete kaitse seadus, § 6 · Read the law's page
- If you process personal data without the data subject's consent for scientific or historical research or official statistics, process it in pseudonymised form or in a form that gives an equivalent level of data protection, and replace the personal data with such data before you hand it over for that processing (Personal Data Protection Act, Section 6(1)).
- Re-identify pseudonymised data, or any other non-identifying data, only for further scientific or historical research or official statistics (Section 6(2)).
- Designate by name the person who has access to the data that allow depseudonymisation (Section 6(2)).
Human Genetic Research Act, pseudonymisation and depseudonymisation of gene donor data (Sections 6, 12, 24 and 26)since 4 lines
Inimgeeniuuringute seadus, RT I, 17.03.2026, 1, §§ 4, 24 and 26 · Read the law's page
- If you are the controller of the gene bank, replace with a pseudonym all data in a donor's tissue sample and personal data that allow the donor to be identified directly (Section 24(3)).
- If you are the controller of the gene bank, an authorised processor or the controller of a research study, mark tissue samples and personal data, including the family tree, with the pseudonym the gene bank controller assigned (Section 24(4)).
- If you are the controller of the gene bank, keep the right to pseudonymise and depseudonymise donors' personal data to yourself and do not give it to an authorised processor (Section 12(2)).
- If you are the controller of the gene bank, depseudonymise a donor's personal data without an assessment by the research ethics committee only in the cases Section 26(1) lists.