Speaking on behalf of DIGITALEUROPE, Senior Policy Manager Alexander Whalen, joined speakers from ENISA and the European Commission to discuss the resulting specific requirements for healthcare stakeholders as a consequence of the two new laws while pointing out Member State specific approaches to compliance as well as the role of common guidelines concerning the implementation by stakeholders.
During his intervention, Mr Whalen stressed that fact that the GDPR will have a direct impact on the way all entities handle EU citizens personal data, including health data. He noted that organisations handling health data, which is classified as sensitive data under the GDPR, will need to pay specific attention to the new rules in the GDPR. His presentation covered the issues of transparency, the expansion of the definition of ‘sensitive data’, the widened scope, rules for processing ‘health data’, how to obtain consent, the importance of scientific research, data breach notification, documentation requirements, and appointing data protection officers.
For more information you can find DIGITALEUROPE’s eHealth week presentation here.
For more information please contact: