Personal Data Protection Act, pseudonymisation safeguard for archiving, research and statistics
Act No. 18/2018 Coll. on the Protection of Personal Data, section 78(7)
In force since .
A de-identification rule binding public and private bodies.
- Instrument type
- an act of a legislature
- How the hook was established
- express
- What makes it apply
- Operator establishment, Market targeting, User location, Place of effect
- Obligation class
- Security
- Audit expectation
- none
What it requires
- When processing personal data for archiving, scientific, historical research or statistical purposes, adopt appropriate safeguards for the data subject's rights, including appropriate and effective technical and organisational measures to ensure data minimisation and pseudonymisation (section 78(7)).
- For further processing of personal data for archiving, scientific, historical research or statistical purposes to count as compatible with the original purpose, act in accordance with a special regulation and observe the safeguards under section 78(7) (section 7).
These lines are LexLint's reading of the law's text.
What record it asks for
Logging duty
Section 78(7) of Act No. 18/2018 Coll. sets a safeguard of minimisation and pseudonymisation for research and statistics processing. It states no duty to create, keep or produce a log or record.
- Kind
- None
- As of
What this law does
Section 78(7) of Act No. 18/2018 Coll. requires a controller and a processor that process personal data for archiving, scientific, historical research or statistical purposes to adopt appropriate safeguards for the data subject's rights, which include appropriate and effective technical and organisational measures, in particular to ensure data minimisation and pseudonymisation.
Act No. 18/2018 Coll. defines pseudonymisation as processing personal data so that they cannot be attributed to a specific data subject without additional information that is kept separately and covered by technical and organisational measures.
Section 7 of Act No. 18/2018 Coll. treats further processing for archiving, scientific, historical research or statistical purposes as compatible with the original purpose where it accords with a special regulation and the safeguards under section 78(7) are observed.
When LexLint raises it
When your app profile says your app processes personal data or processes de-identified data.
Back to the example · Lint your app
Page updated .