Recital 156
Recital 156
(156) 為符合公共利益、達成科學或歷史研究目的或統計目的所為個 人資料之處理應受本規則為資料主體之權利或自由所定適當保護措 施之拘束。該等保護措施應確保已備妥技術上及組織上之措施，用以 確保，特別是資料最少蒐集原則之落實。為符合公共利益、達成科學 或歷史研究目的或統計目的，當控管者已評估實現該等目的之可行性， 且藉由不允許或不再允許識別資料主體為該處理，並有適當的保護措 施存在（例如，資料之假名化）時，個人資料將得進行進階處理。會 員國對於為達成公共利益目的之個人資料處理，應提供適當之保護措施。在進行符合公共利益、達成科學或歷史研究目的或統計目的之個 人資料處理時，會員國在符合特定條件且有提供資料主體適當保護措 施時，應有權具體化及除外化關於資訊之要求，以及關於更正、刪除、 被遺忘、限制處理、資料可攜性及拒絕之權利。若依照特定資料處理 所追求之目的為適當，且其技術上及組織上之措施係為落實適當性及 必要性原則而減少個人資料處理時，其條件及保護措施可能需要有特 定程序使資料主體得行使該等權利。為科學目的之個人資料處理亦應 遵守其他相關之法規，例如對於臨床試驗之規範。
(156) The processing of personal data for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes should be subject to appropriate safeguards for the rights and freedoms of the data subject pursuant to this Regulation.
Those safeguards should ensure that technical and organisational measures are in place in order to ensure, in particular, the principle of data minimisation.
The further processing of personal data for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes is to be carried out when the controller has assessed the feasibility to fulfil those purposes by processing data which do not permit or no longer permit the identification of data subjects, provided that appropriate safeguards exist (such as, for instance, pseudonymisation of the data).
Member States should provide for appropriate safeguards for the processing of personal data for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes.
Member States should be authorised to provide, under specific conditions and subject to appropriate safeguards for data subjects, specifications and derogations with regard to the information requirements and rights to rectification, to erasure, to be forgotten, to restriction of processing, to data portability, and to object when processing personal data for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes.
The conditions and safeguards in question may entail specific procedures for data subjects to exercise those rights if this is appropriate in the light of the purposes sought by the specific processing along with technical and organisational measures aimed at minimising the processing of personal data in pursuance of the proportionality and necessity principles.
The processing of personal data for scientific purposes should also comply with other relevant legislation such as on clinical trials.
Source: https://www.ndc.gov.tw/Content_List.aspx?n=F98A8C27A0F54C30
The latest consolidated version of the Regulation with corrections by Corrigendum, OJ L 127, 23.5.2018, p. 2 ((EU) 2016/679). Source: EUR-lex.