The Eighth International Privacy Congress addresses health research data processing

On 16 and 17 June, in Madrid, the Spanish Professional Association of Privacy (APEP) held the Eighth International Privacy Congress, a leading annual conference for professionals in the sector, representatives of national and European authorities, and international collaborating associations.

Lluís Sabaté, a technician at the Office of the Data Protection Officer at TIC Salut Social Foundation, participated in a roundtable on health research data processing, together with other experts in the field. These included Jesús Rubí from the Spanish Data Protection Agency; Ricard Martínez, Microsoft-Universitat de València Privacy and Digital Transformation Chair; Julián Isla from Fundación 29 de Febrero; Joaquín Cañada from the Valencian Government; and Eduard Blasi, third vice-president of the APEP, who was the moderator.

Sabaté shared that during the COVID-19 pandemic there had been “an avalanche of research and innovation proposals” based on technologies such as artificial intelligence, big data, biometrics and virtual reality. There was also extensive development of health devices and applications, “which require legal answers to the implications for data protection regulations.”

The session also dealt with aspects such as the use of emerging technologies in the field of health and the reuse of health information. There was special emphasis on the recent European regulation and the Code of Conduct for the Pharmaceutical Industry recently approved by the Spanish Data Protection Agency. On the one hand, regarding the reuse of health data, Sabaté explained the Data Analysis Programme for Health Research and Innovation that is available to the scientific community in Catalonia and the access requests made during the pandemic. On the other hand, the Spanish Data Protection Agency announced that it is working on drafting guidelines for the clinical research ethics committees to assess research projects that use emerging technologies.

Finally, the speakers commented on recently-approved European regulations, such as the Data Governance Act and the European Health Data Space.

Other topics addressed at the congress

In addition to the processing of health research data, the conference also dealt with future privacy challenges, and current trends and issues. These included the key issues in acting as a Data Protection Officer (DPO), the weighting of rights in processing based on a legitimate interest, and the latest penalties and case law arising from the General Data Protection Regulation (GDPR).

After two years in which it could not be held in person, at this eighth congress it was possible to physically bring professionals in the field of data protection and the members of the association together.