DenmarkExecutive Order on disclosure of health record data for research, statistics and planning, pseudonymized disclosure and end-of-study anonymization
In force since .
A de-identification rule binding public and private bodies.
- Audit expectation
- none
What it requires
- Disclose health record data for a research project, statistics or planning in pseudonymized form, so that the receiving data controller cannot directly trace it to a person, unless identification is strictly necessary for the study.
- When the study ends, delete, anonymize, destroy or return the health record data so that no natural person can be identified from it, alone or combined with other information, or move it to an archive under the archive laws.
These lines are LexLint's reading of the law's text.
What record it asks for
Logging duty
The provision states no duty to create, keep or produce a log or record.
- Kind
- None
- As of
What this law does
Executive Order No. 1067 of requires that health record data disclosed for a research project of substantial societal importance, statistics or planning be disclosed in pseudonymized form, so that it cannot be directly traced to a person by the receiving controller, and that the receiving controller delete, anonymize, destroy or return the data when the study ends.
Where it is strictly necessary for the study that individuals can be identified, supplementary information may be disclosed so the data can be linked to named persons.
When LexLint raises it
When your app profile says your app handles health records, processes personal data or processes de-identified data.
Back to the example · Lint your app
Page updated .