NIST Privacy Framework, Control-PCT.DP-P2

Give a public-health research body access to personal data only within a controlled and secure environment, anonymized or pseudonymized where possible, and never transfer that data to a third party.

If you operate or build a system that stores or processes health or other personal data in a Croatian national or institutional health information system, process the data with appropriate security and confidentiality and apply pseudonymization, encryption, restoration and regular testing measures (Rulebook Articles 6 and 7).

If you operate a health care facility that further processes health data it stores lawfully under GDPR Article 9(2)(h) or (i) for quality assurance, patient safety, research or statistics, pseudonymize the data, anonymize it as soon as the purpose allows, and delete it no later than 30 years after the further processing began (GDNG Section 6, paragraph 1).

Limit the exchange of health data between health professionals to what coordination or continuity of care strictly requires, and anonymize health data before sharing it or publishing research drawn from it.

Process the biometric data of a worker in Portugal only for attendance control and for control of access to your premises, use only representations of the biometric data, and collect it in a way that does not allow the data to be reversed, under Lei 58/2019 Article 28(6).

Strip biometric identifiers, including voiceprints and full-face photographic images, before treating health data as de-identified.

Treat opinion-poll, market-research, or scientific-research data as outside this Act only while it cannot be attributed to an identifiable person, and apply a dissociation technique where anonymity cannot otherwise be kept during collection.

Obtain the CIL's authorization, given after the Health Research Ethics Committee's concurring opinion, before processing personal data for health research, anonymize the data before transmission wherever the research's purpose allows it, and host any health data that still permits identification on national territory.

Apply privacy by design and by default, including techniques such as differential privacy, so that data used to train an artificial intelligence system does not allow the person who provided it to be identified.