RGCS (GDPR)
>
Airteagal 89. Coimircí agus maoluithe i ndail le próiseáil chun críocha cartlannú a dhéanamh ar mhaithe le leas an phobail, chun críocha taighde eolaíoch nó stairiúil nó chun críocha staidrimh
Airteagal 89 RGCS (GDPR). Coimircí agus maoluithe i ndail le próiseáil chun críocha cartlannú a dhéanamh ar mhaithe le leas an phobail, chun críocha taighde eolaíoch nó stairiúil nó chun críocha staidrimh
Article 89 GDPR. Safeguards and derogations relating to processing for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes
1. Próiseáil chun cartlannú a dhéanamh ar mhaithe le leas an phobail, chun críocha taighde eolaíoch nó stairiúil nó chun críocha staidrimh, beidh sí faoi réir coimircí is iomchuí ó thaobh chearta agus saoirsí an ábhair sonraí i gcomhréir leis an Rialachán seo. Leis na coimircí sin, ba cheart a áirithiú go mbeidh bearta teicniúla agus eagraíochtúla i bhfeidhm go háirithe chun a áirithiú go ndéanfar prionsabal an íoslaghdaithe sonraí a urramú. Féadfar a áireamh ar na bearta sin ainm bréige a chur i bhfeidhm, ar choinníoll gur féidir na críocha sin a chomhlíonadh ar an mbealach sin. I gcás gur féidir na críocha sin a chomhlíonadh trí thuilleadh próiseála, más próiseáil í sin nach gceadaítear léi aitheantas na n-ábhar sonraí a chur in iúl nó nach gcéadaítear sin a thuilleadh, is ar an mbealach sin a chomhlíonfar na críocha sin.
1. Processing for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes, shall be subject to appropriate safeguards, in accordance with this Regulation, for the rights and freedoms of the data subject. Those safeguards shall ensure that technical and organisational measures are in place in particular in order to ensure respect for the principle of data minimisation. Those measures may include pseudonymisation provided that those purposes can be fulfilled in that manner. Where those purposes can be fulfilled by further processing which does not permit or no longer permits the identification of data subjects, those purposes shall be fulfilled in that manner.
2. I gcás ina ndéantar sonraí pearsanta a phróiseáil chun críocha taighde eolaíoch nó stairiúil nó chun críocha staidrimh, le dlí an Aontais nó le dlí Ballstáit féadfar foráil a dhéanamh do mhaoluithe ó na cearta dá dtagraítear in Airteagal 15, 16, 18 agus 21 faoi réir na gcoinníollacha agus na gcoimircí dá dtagraítear i mír 1 den Airteagal seo a mhéid agus is dealraitheach go bhfágann cearta den sórt sin nach féidir na críocha sin a bhaint amach nó go gcuirfear bac tromchúiseach ar a mbaint amach, agus a mhéid a bhfuil gá le maoluithe den sórt sin chun na críocha sin a chomhlíonadh.
2. Where personal data are processed for scientific or historical research purposes or statistical purposes, Union or Member State law may provide for derogations from the rights referred to in Articles 15, 16, 18 and 21 subject to the conditions and safeguards referred to in paragraph 1 of this Article in so far as such rights are likely to render impossible or seriously impair the achievement of the specific purposes, and such derogations are necessary for the fulfilment of those purposes.
3. I gcás ina ndéantar sonraí pearsanta a phróiseáil chun cartlannú a dhéanamh ar mhaithe le leas an phobail, féadfar, le dlí an Aontais nó le dlí Ballstáit, foráil a dhéanamh do mhaoluithe ó na cearta dá dtagraítear in Airteagal 15, 16, 18, 19, 20 agus 21 faoi réir na gcoinníollacha agus na gcoimircí dá dtagraítear i mír 1 den Airteagal seo a mhéid agus is dealraitheach go bhfágann cearta den sórt sin nach féidir na críocha sin a bhaint amach nó go gcuirfear bac tromchúiseach ar a mbaint amach, agus a mhéid a bhfuil gá le maoluithe den sórt sin chun na críocha sin a chomhlíonadh.
3. Where personal data are processed for archiving purposes in the public interest, Union or Member State law may provide for derogations from the rights referred to in Articles 15, 16, 18, 19, 20 and 21 subject to the conditions and safeguards referred to in paragraph 1 of this Article in so far as such rights are likely to render impossible or seriously impair the achievement of the specific purposes, and such derogations are necessary for the fulfilment of those purposes.
4. I gcás ina bhfreastalaíonn próiseáil de chineál dá dtagraítear i mír 2 agus i mír 3 ar chríoch eile ag an am céanna, ní bheidh feidhm ag na maoluithe ach amháin de phróiseáil a dhéanfar chun na gcríoch dá dtagraítear sna míreanna sin.
4. Where processing referred to in paragraphs 2 and 3 serves at the same time another purpose, the derogations shall apply only to processing for the purposes referred to in those paragraphs.
An Rialachán Ginearálta maidir le Cosaint Sonraí (RGCS, GDPR)
General Data Protection Regulation (EU GDPR)
The latest consolidated version of the Regulation with corrections by Corrigendum, OJ L 127, 23.5.2018, p. 2 ((EU) 2016/679). Source: EUR-lex.
Tráchtaireacht
Recitals
Dlí Treoirlínte & Cásanna
Leave a comment
(156) Maidir le sonraí pearsanta a phróiseáil chun críocha cartlannú a dhéanamh ar mhaithe le leas an phobail, chun críocha taighde eolaíoch nó stairiúil nó chun críocha staidrimh, ba cheart an phróiseáil sin a bheith faoi réir coimircí iomchuí do chearta agus do shaoirsí an ábhair sonraí de bhun an Rialacháin seo. Leis na coimircí sin, ba cheart a áirithiú go bhfuil bearta teicniúla agus bearta eagraíochtúla i bhfeidhm chun, go háirithe, prionsabal an íoslaghdaithe sonraí a áirithiú. Maidir le sonraí pearsanta a phróiseáil tuilleadh chun críocha cartlannú a dhéanamh ar mhaithe le leas an phobail, chun críocha taighde eolaíoch nó stairiúil nó chun críocha staidrimh, ba cheart an phróiseáil sin a dhéanamh tráth a mbeidh measúnú déanta ag an rialaitheoir an féidir na críocha sin a chomhlíonadh trí phróiseáil a dhéanamh ar shonraí pearsanta nach féidir na hábhair sonraí a aithint leo nó nach féidir na hábhair sonraí a aithint leo a thuilleadh, ar an gcoinníoll gurb ann do choimircí iomchuí (amhail, mar shampla, ainm bréige a chur i bhfeidhm ar na sonraí). Ba cheart do na Ballstáit foráil a dhéanamh do choimircí iomchuí chun sonraí pearsanta a phróiseáil chun críocha cartlannú a dhéanamh ar mhaithe le leas an phobail, chun críocha taighde eolaíoch nó stairiúil nó chun críocha staidrimh. Ba cheart údarás a thabhairt do na Ballstáit sonraíochtaí agus maoluithe a chur ar fáil, faoi choinníollacha sonracha agus faoi réir coimircí iomchuí do na hábhair sonraí, maidir leis na ceanglais faisnéise agus cearta a chur ar fáil go ndéanfaí ceartú, léirscriosadh, ligean i ndearmad, srianadh ar phróiseáil, agus chun iniomparthacht sonraí, agus chun agóid a dhéanamh agus sonraí pearsanta á bpróiseáil chun críocha cartlannú a dhéanamh ar mhaithe le leas an phobail, chun críocha taighde eolaíoch nó stairiúil nó chun críocha staidrimh. Leis na coinníollacha agus leis na coimircí atá i gceist, d'fhéadfaí go mbeadh nósanna imeachta sonracha ann do na hábhair sonraí chun na cearta sin a fheidhmiú más iomchuí amhlaidh i bhfianaise na gcríoch a lorgaítear tríd an bpróiseáil shonrach in éineacht le bearta teicniúla agus eagraíochtúla lena ndírítear ar phróiseáil sonraí pearsanta a laghdú agus prionsabail na comhréireachta agus an riachtanais á saothrú. An phróiseáil a dhéantar ar shonraí pearsanta chun críocha eolaíochta, ba cheart reachtaíocht ábhartha eile, amhail reachtaíocht maidir le trialacha cliniciúla, a chomhlíonadh léi freisin.
(156) The processing of personal data for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes should be subject to appropriate safeguards for the rights and freedoms of the data subject pursuant to this Regulation. Those safeguards should ensure that technical and organisational measures are in place in order to ensure, in particular, the principle of data minimisation. The further processing of personal data for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes is to be carried out when the controller has assessed the feasibility to fulfil those purposes by processing data which do not permit or no longer permit the identification of data subjects, provided that appropriate safeguards exist (such as, for instance, pseudonymisation of the data). Member States should provide for appropriate safeguards for the processing of personal data for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes. Member States should be authorised to provide, under specific conditions and subject to appropriate safeguards for data subjects, specifications and derogations with regard to the information requirements and rights to rectification, to erasure, to be forgotten, to restriction of processing, to data portability, and to object when processing personal data for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes. The conditions and safeguards in question may entail specific procedures for data subjects to exercise those rights if this is appropriate in the light of the purposes sought by the specific processing along with technical and organisational measures aimed at minimising the processing of personal data in pursuance of the proportionality and necessity principles. The processing of personal data for scientific purposes should also comply with other relevant legislation such as on clinical trials.
(157) Trí fhaisnéis ó chlárlanna a chúpláil, is féidir le taighdeoirí eolas nua a fháil a bhfuil ardluach leis i dtaca le riochtaí sláinte forleathana amhail galar cardashoithíoch, an ailse agus an dúlagar. Ar bhonn na gclárlann, is féidir torthaí an taighde a fheabhsú, toisc go mbaintear leas as daonra níos mó. Laistigh den eolaíocht shóisialta, tá taighdeoirí in ann eolas ríthábhachtach a fháil, ó thaighde a dhéantar ar bhonn na gclárlann, faoin gcomhghaolú fadtéarmach atá ag roinnt coinníollacha sóisialta amhail dífhostaíocht agus oideachas mar aon le coinníollacha eile sa saol. Le torthaí taighde a fhaightear ó chlárlanna, cuirtear dlútheolas ardchaighdeáin ar fáil, ar féidir a bheith mar bhunús chun beartas eolasbhunaithe a fhoirmliú agus a chur chun feidhme, feabhas a chur ar mhianach saoil do líon mór daoine agus feabhas a chur ar éifeachtúlacht na seirbhísí sóisialta. D'fhonn taighde eolaíoch a éascú, féadtar sonraí pearsanta a phróiseáil chun críocha taighde eolaíoch, faoi réir coinníollacha iomchuí agus coimircí iomchuí a leagtar amach i ndlí an Aontais nó i ndlí Ballstáit.
(157) By coupling information from registries, researchers can obtain new knowledge of great value with regard to widespread medical conditions such as cardiovascular disease, cancer and depression. On the basis of registries, research results can be enhanced, as they draw on a larger population. Within social science, research on the basis of registries enables researchers to obtain essential knowledge about the long-term correlation of a number of social conditions such as unemployment and education with other life conditions. Research results obtained through registries provide solid, high-quality knowledge which can provide the basis for the formulation and implementation of knowledge-based policy, improve the quality of life for a number of people and improve the efficiency of social services. In order to facilitate scientific research, personal data can be processed for scientific research purposes, subject to appropriate conditions and safeguards set out in Union or Member State law.
(158) I gcás ina bpróiseáiltear sonraí pearsanta chun críocha cartlannú a dhéanamh, ba cheart feidhm a bheith ag an Rialachán seo maidir leis an bpróiseáil sin freisin, ag cur san áireamh nár cheart go mbeadh feidhme ag an Rialachán seo maidir le daoine éagtha. Údaráis phoiblí nó comhlachtaí poiblí nó príobháideacha a bhfuil taifid atá chun leas an phobail ina seilbh acu, ba cheart iad a bheith ina seirbhísí a bhfuil sé d'oibleagáid dhlíthiúil orthu, de bhun dlí an Aontais nó dlí Ballstáit, taifid a fháil, a chaomhnú, a eagrú, a chur in iúl, a chur chun cinn, a scaipeadh, cur síos a dhéanamh, breithmheas a thabhairt orthu agus rochtain orthu a chur ar fáil, ar taifid iad a bhfuil luach marthanach ar baint leo chun leas ginearálta an phobail. Ba cheart freisin údarás a thabhairt do na Ballstáit foráil a dhéanamh go bhféadfaí sonraí pearsanta a phróiseáil tuilleadh chun críocha cartlannú a dhéanamh, mar shampla d'fhonn faisnéis shonrach a chur ar fáil a bhaineann le hiompar polaitiúil faoi iar-réimis ollsmachtacha stáit, le cinedhíothú, le coireanna in aghaidh an chine dhaonna, go háirithe an tUileloscadh, nó le coireanna cogaidh.
(158) Where personal data are processed for archiving purposes, this Regulation should also apply to that processing, bearing in mind that this Regulation should not apply to deceased persons. Public authorities or public or private bodies that hold records of public interest should be services which, pursuant to Union or Member State law, have a legal obligation to acquire, preserve, appraise, arrange, describe, communicate, promote, disseminate and provide access to records of enduring value for general public interest. Member States should also be authorised to provide for the further processing of personal data for archiving purposes, for example with a view to providing specific information related to the political behaviour under former totalitarian state regimes, genocide, crimes against humanity, in particular the Holocaust, or war crimes.
(159) I gcás ina bpróiseáiltear sonraí pearsanta chun críocha taighde eolaíoch, ba cheart feidhm a bheith ag an Rialachán seo maidir leis an bpróiseáil sin. Chun críocha an Rialacháin seo, ba cheart an phróiseáil a dhéantar ar shonraí pearsanta chun críocha taighde eolaíoch a léiriú ar bhonn leathan, lena n-áirítear, mar shampla, forbairt teicneolaíochta agus léiriú teicneolaíochta, taighde bunúsach, taighde feidhmeach agus taighde a chistítear go poiblí, agus ba cheart freisin aird a thabhairt ar chuspóir an Aontais faoi Airteagal 179(1) CFAE maidir le Limistéar Eorpach Taighde a ghnóthú. Ar na críocha taighde eolaíoch ba cheart a áireamh freisin staidéir a dhéantar ar mhaithe le leas an phobail i réimse na sláinte poiblí. Chun na sainiúlachtaí a bhaineann le sonraí pearsanta a phróiseáil chun críocha taighde eolaíoch a chomhlíonadh, ba cheart feidhm a bheith ag coinníollacha sonracha, go háirithe maidir le sonraí pearsanta a fhoilsiú nó a nochtadh ar shlí eile i gcomhthéacs críocha taighde eolaíochta. Más é toradh an taighde eolaíoch, go háirithe sa chomhthéacs sláinte, is cúis le tuilleadh beart chun leas an ábhair sonraí, ba cheart feidhm a bheith ag rialacha ginearálta an Rialacháin seo i bhfianaise na mbeart sin.
(159) Where personal data are processed for scientific research purposes, this Regulation should also apply to that processing. For the purposes of this Regulation, the processing of personal data for scientific research purposes should be interpreted in a broad manner including for example technological development and demonstration, fundamental research, applied research and privately funded research. In addition, it should take into account the Union's objective under Article 179(1) TFEU of achieving a European Research Area. Scientific research purposes should also include studies conducted in the public interest in the area of public health. To meet the specificities of processing personal data for scientific research purposes, specific conditions should apply in particular as regards the publication or otherwise disclosure of personal data in the context of scientific research purposes. If the result of scientific research in particular in the health context gives reason for further measures in the interest of the data subject, the general rules of this Regulation should apply in view of those measures.
(160) I gcás ina bpróiseáiltear sonraí pearsanta chun críocha taighde stairiúil, ba cheart feidhm a bheith ag an Rialachán seo maidir leis an bpróiseáil sin. Ba cheart a áireamh leis sin taighde stairiúil agus taighde chun críoch ginealach, agus é á chur san áireamh nár cheart feidhm a bheith ag an Rialachán seo maidir le daoine éagtha.
(160) Where personal data are processed for historical research purposes, this Regulation should also apply to that processing. This should also include historical research and research for genealogical purposes, bearing in mind that this Regulation should not apply to deceased persons.
(161) Chun críche toiliú a thabhairt maidir le rannpháirtíocht i ngníomhaíochtaí taighde eolaíoch i dtrialacha cliniciúla, ba cheart feidhm a bheith ag forálacha ábhartha Rialachán (AE) Uimh. 536/2014 ó Pharlaimint na hEorpa agus ón gComhairle (15).
(161) For the purpose of consenting to the participation in scientific research activities in clinical trials, the relevant provisions of Regulation (EU) No 536/2014 of the European Parliament and of the Council [15] should apply.
(15) Rialachán (AE) Uimh. 536/2014 ó Pharlaimint na hEorpa agus ón gComhairle an 16 Aibreán 2014 maidir le trialacha cliniciúla ar tháirgí íocshláinte lena n-úsáid ag an duine, agus lena n-aisghairtear Treoir 2001/20/CE (IO L 158, 27.5.2014, lch. 1). https://eur-lex.europa.eu/legal-content/EN/AUTO/?uri=OJ:L:2014:158:TOC
[15] Regulation (EU) No 536/2014 of the European Parliament and of the Council of 16 April 2014 on clinical trials on medicinal products for human use, and repealing Directive 2001/20/EC (OJ L 158, 27.5.2014, p. 1). https://eur-lex.europa.eu/legal-content/EN/AUTO/?uri=OJ:L:2014:158:TOC
(162) I gcás ina bpróiseáiltear sonraí pearsanta chun críoch staidrimh, ba cheart feidhm a bheith ag an Rialachán seo maidir leis an bpróiseáil sin. Ba cheart a chinneadh le dlí an Aontais nó le dlí Ballstáit, faoi chuimsiú theorainneacha an Rialacháin seo, ábhar staidrimh, rialú rochtana, sonraíochtaí chun sonraí pearsanta a phróiseáil chun críoch staidrimh agus bearta iomchuí chun cearta agus saoirsí an ábhair sonraí a choimirciú agus chun rúndacht staidrimh a áirithiú. Ciallaíonn críocha staidrimh aon oibríocht maidir le sonraí pearsanta a bhailiú agus a phróiseáil atá riachtanach le haghaidh suirbhéanna staidrimh nó le haghaidh torthaí staidrimh a tháirgeadh. Féadfar na torthaí staidrimh sin a úsáid tuilleadh chun críocha éagsúla, lena n-áirítear críoch taighde eolaíoch. Tugann an chríoch staidrimh le tuiscint nach sonraí pearsanta a bhíonn mar thoradh ar phróiseáil chun críocha staidrimh ach sonraí comhiomlána, agus nach mbaintear úsáid as an toradh sin ná as na sonraí pearsanta chun tacú le bearta nó le cinntí a bhaineann le haon duine nádúrtha ar leith.
(162) Where personal data are processed for statistical purposes, this Regulation should apply to that processing. Union or Member State law should, within the limits of this Regulation, determine statistical content, control of access, specifications for the processing of personal data for statistical purposes and appropriate measures to safeguard the rights and freedoms of the data subject and for ensuring statistical confidentiality. Statistical purposes mean any operation of collection and the processing of personal data necessary for statistical surveys or for the production of statistical results. Those statistical results may further be used for different purposes, including a scientific research purpose. The statistical purpose implies that the result of processing for statistical purposes is not personal data, but aggregate data, and that this result or the personal data are not used in support of measures or decisions regarding any particular natural person.
(163) Ba cheart cosaint a dhéanamh ar an bhfaisnéis rúnda a bhailíonn an tAontas agus na húdaráis náisiúnta staidrimh chun staidreamh Eorpach oifigiúil agus staidreamh náisiúnta oifigiúil a tháirgeadh. Ba cheart staidreamh Eorpach a fhorbairt, a tháirgeadh agus a scaipeadh i gcomhréir leis na prionsabail staidrimh mar a leagtar amach in Airteagal 338(2) CFAE, agus ba cheart do staidreamh náisiúnta dlí Ballstáit a chomhlíonadh. Le Rialachán (CE) Uimh. 223/2009 ó Pharlaimint na hEorpa agus ón gComhairle (16), foráiltear do thuilleadh sonraíochtaí maidir le rúndacht staidrimh do staidreamh Eorpach.
(163) The confidential information which the Union and national statistical authorities collect for the production of official European and official national statistics should be protected. European statistics should be developed, produced and disseminated in accordance with the statistical principles as set out in Article 338(2) TFEU, while national statistics should also comply with Member State law. Regulation (EC) No 223/2009 of the European Parliament and of the Council [16] provides further specifications on statistical confidentiality for European statistics.
(16) Rialachán (CE) Uimh. 223/2009 ó Pharlaimint na hEorpa agus ón gComhairle an 11 Márta 2009 maidir le Staidreamh Eorpach agus lena n-aisghairtear Rialachán (CE, Euratom) Uimh. 1101/2008 ó Pharlaimint na hEorpa agus ón gComhairle maidir le tarchur sonraí atá faoi réir rúndacht staidrimh chuig Oifig Staidrimh na gComhphobal Eorpach, Rialachán (CE) Uimh. 322/97 ón gComhairle maidir le Staidreamh Comhphobail, agus Cinneadh 89/382/CEE, Euratom ón gComhairle lena mbunaítear Coiste um Chláir Staidrimh na gComhphobal Eorpach (IO L 87, 31.3.2009, lch. 164). https://eur-lex.europa.eu/legal-content/EN/AUTO/?uri=OJ:L:2009:087:TOC
[16] Regulation (EC) No 223/2009 of the European Parliament and of the Council of 11 March 2009 on European statistics and repealing Regulation (EC, Euratom) No 1101/2008 of the European Parliament and of the Council on the transmission of data subject to statistical confidentiality to the Statistical Office of the European Communities, Council Regulation (EC) No 322/97 on Community Statistics, and Council Decision 89/382/EEC, Euratom establishing a Committee on the Statistical Programmes of the European Communities (OJ L 87, 31.3.2009, p. 164). https://eur-lex.europa.eu/legal-content/EN/AUTO/?uri=OJ:L:2009:087:TOC
(EN)
Documents
[js-disqus]
(EN) Url-link to highlighted text was copied to the clipboard!
(EN) Preparing download...
(EN) Article 89 details the appropriate safeguards to process sensitive data for archiving, research, and statistics purposes under article 9 2) (j) and possible derogations to rights granted to individuals by the General Data Protection Regulation. There is indeed a legal exception allowing the processing of special categories of personal data. It must be provided for by a Union or Member State law and the law itself must meet certain conditions that I have already discussed in a previous commentary.
Appropriate safeguards under article 89 concern technical and organizational measures put in place by Member States and respecting the data minimization, proportionality, and necessity principles (recital 156). They may include the possibility of resorting to pseudonymization, where applicable, or further processing “which does not permit or no longer permits the identification of data subjects”. The measures involved must take into account the impact on individuals, like physical or psychological potential damages they might suffer.
Member States law may provide for derogations, in the case of scientific research, historical research or statistics, to the right of access (article 15), the right to rectification (article 16), the right to restriction of processing (article 18), and the right to object (article 21). It is possible to refuse to grant these rights to individuals only if respecting them would hinder or “seriously impair” the achievement of the desired goals, that is to say, conducting scientific or historical research or producing statistics.
(EN) […]
(EN) Sign in
to read the full text