GreeceLaw 4624/2019 Article 30, anonymisation and pseudonymisation of research and statistical data
In force since .
A de-identification rule binding public and private bodies.
- Obligation class
- Retention, Security
What it requires
- If you process special categories of personal data in Greece for scientific or historical research or for statistics, anonymise them as soon as those purposes allow, unless that is contrary to the legitimate interest of the data subject (Law 4624/2019 Article 30(3)).
- Until the data are anonymised, store separately the characteristics that can be used to match individual details to an identified or identifiable person, and combine them with the individual details only where research or statistical purposes require it (Article 30(3)).
- If you publish personal data processed in research without the written consent of the data subjects, publish only what is necessary to present the results, and pseudonymise the results before publishing them (Article 30(4)).
These lines are LexLint's reading of the law's text.
What this law does
Article 30(3) of Law 4624/2019 requires special categories of personal data processed for scientific or historical research or for statistics to be anonymised as soon as those purposes allow, unless that is contrary to the legitimate interest of the data subject.
Until the data are anonymised, the characteristics that can be used to match individual details to an identified or identifiable person must be stored separately, and may be combined with the individual details only where research or statistical purposes require it.
Article 30(4) allows a controller to publish personal data processed in research only with the written consent of the data subjects or where publication is necessary to present the results, and in the second case the results must be pseudonymised before publication.
When LexLint raises it
When your app profile says your app processes personal data or processes de-identified data.
Back to the example · Lint your app
Page updated .