Data Protection Act, pseudonymisation and identification-free processing for research, statistics and archiving
Data Protection Act (Cap. 586), art. 6(4)
In force since .
A de-identification rule binding public and private bodies.
- Instrument type
- an act of a legislature
What it requires
- Where you process personal data for scientific or historical research, official statistics or archiving in the public interest, apply appropriate safeguards for the data subject's rights and freedoms, including pseudonymisation and other technical and organisational measures that respect data minimisation (Data Protection Act, article 6(4)).
- Where those research, statistics or archiving purposes can be fulfilled by processing that does not permit, or no longer permits, the identification of data subjects, fulfil them in that manner (Data Protection Act, article 6(4), proviso).
These lines are LexLint's reading of the law's text.
What this law does
Article 6(4) of the Data Protection Act subjects processing for scientific or historical research, official statistics or archiving in the public interest to appropriate safeguards that include pseudonymisation. Where those purposes can be fulfilled by processing that does not permit, or no longer permits, the identification of data subjects, article 6(4) requires that they be fulfilled in that manner.
When LexLint raises it
When your app profile says your app processes personal data or processes de-identified data.
Back to the example · Lint your app
Page updated .