ItalyCodice Privacy art. 110-bis, Further Processing by Third Parties for Research or Statistics
Decreto Legislativo 30 giugno 2003, n. 196, art. 110-bis, commi 1-3
In force since .
A de-identification rule binding public and private bodies.
- Audit expectation
- none
What it requires
- Where you rely on the Garante's authorization under Article 110-bis for further processing of personal data, special categories included, for scientific research or statistics as a third party that mainly carries out those activities, adopt the appropriate measures required by General Data Protection Regulation (GDPR) Article 89, including preventive minimization and anonymization of the data (Article 110-bis, paragraph 1).
- Comply with the conditions and measures the Garante sets in the authorization, or afterwards following verifications, or in a general measure, including those on the security of the data (Article 110-bis, paragraphs 2 and 3).
These lines are LexLint's reading of the law's text.
What record it asks for
Logging duty
The provision states no duty to create, keep or produce a log or record.
- Kind
- None
- As of
What this law does
Under Article 110-bis of the Codice Privacy the Garante may authorize further processing of personal data, special categories included, for scientific research or statistics by third parties that mainly carry out those activities. The authorization depends on appropriate measures under General Data Protection Regulation (GDPR) Article 89, including preventive forms of minimization and anonymization of the data. The Garante may grant the authorization by general measures that set the conditions of the further processing.
When LexLint raises it
When your app profile says your app processes personal data or processes de-identified data.
Back to the example · Lint your app
Page updated .