Law / Slovakia

Personal Data Protection Act, pseudonymisation safeguard for archiving, research and statistics

Act No. 18/2018 Coll. on the Protection of Personal Data, section 78(7)

In force since .

A de-identification rule binding public and private bodies.

Instrument type
an act of a legislature
How the hook was established
express
What makes it apply
Operator establishment, Market targeting, User location, Place of effect
Obligation class
Security
Audit expectation
none

What it requires

  • When processing personal data for archiving, scientific, historical research or statistical purposes, adopt appropriate safeguards for the data subject's rights, including appropriate and effective technical and organisational measures to ensure data minimisation and pseudonymisation (section 78(7)).
  • For further processing of personal data for archiving, scientific, historical research or statistical purposes to count as compatible with the original purpose, act in accordance with a special regulation and observe the safeguards under section 78(7) (section 7).

These lines are LexLint's reading of the law's text.

What record it asks for

Logging duty

Section 78(7) of Act No. 18/2018 Coll. sets a safeguard of minimisation and pseudonymisation for research and statistics processing. It states no duty to create, keep or produce a log or record.

Kind
None
As of

What this law does

Drafted with AI

Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page. How this site is made

Research summary

Legal information, not legal advice. This is LexLint's own research summary of a public legal source, and it creates no attorney-client relationship. For decisions that matter, consult qualified counsel in the relevant jurisdiction. About LexLint

Section 78(7) of Act No. 18/2018 Coll. requires a controller and a processor that process personal data for archiving, scientific, historical research or statistical purposes to adopt appropriate safeguards for the data subject's rights, which include appropriate and effective technical and organisational measures, in particular to ensure data minimisation and pseudonymisation.

Act No. 18/2018 Coll. defines pseudonymisation as processing personal data so that they cannot be attributed to a specific data subject without additional information that is kept separately and covered by technical and organisational measures.

Section 7 of Act No. 18/2018 Coll. treats further processing for archiving, scientific, historical research or statistical purposes as compatible with the original purpose where it accords with a special regulation and the safeguards under section 78(7) are observed.

When LexLint raises it

When your app profile says your app processes personal data or processes de-identified data.

Back to the example  ·  Lint your app

Page updated .