Processing of Personal Data Concerning Health under the GDPR

Abstract

The globalization and the digital era brought fast technological developments, with high level of processing of personal data that rose new challenges to the protection of personal data. A consistent and homogenous application throughout the European Union of legal provisions aiming to protect personal data, with a system of monitoring and ensuring compliance with those rules, was needed to remove obstacles to the free flow of personal data in the Union and to create an effective protection of the rights of natural persons with regard to the processing of such data. To meet these objectives, the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and of the free movement of such data (GDPR) was thought. The technology became a part of ordinary life and also of the health care systems and the everyday relationship between the physician and the patient, with the digitalization of clinical histories and the construction of electronic health record systems, with the use of electronic prescription, with the scientific research in health context... The aim of this study is to analyse the demands that the GDPR brings to the processing of personal data concerning health and how should the personal data of the data subject be protected.

Keywords: General Data Protection Regulation, data protection, personal data concerning health