The European General Data Protection Regulation (GDPR) was agreed in April 2016 and took effect across all of Europe on 25 May 2018. The Regulation leaves it up to European Union member states to put detailed rules in place to govern the use of personal data in research. A Data Protection Bill 2018 sets out these rules for Ireland.
The Department of Health is preparing specific rules for health data and implementation of the General Data Protection Regulation (GDPR) in Ireland that will sit alongside the Irish Data Protection Bill. Aligned to this, the HRB is advising on the development of appropriate structures and guidance for health researchers on how to ensure compliance with this Regulation. As soon as the specific rules have been agreed with the Attorney General’s Office they will be shared with the research community.
Please see the dedicated section on GDPR guidance for researchers.