Clarification On GDPR Issues In Relation To COVID-19

The COVID-19 pandemic has led to a number of European governments, public organisations and private organisations to process various types of personal data in efforts to contain and mitigate the transmission of this virus. Clarifying the GDPR standpoint in this regard, the European Data Protection Board (EDPB) stressed that while the data protection rules do not hinder measures taken to fight this disease, the data controller must in all circumstances ensure the protection of personal data of the data subjects.

Being broad in nature, GDPR legislation also caters for the process of data in such scenarios. In fact, given the status of epidemic, both employers and the competent public health authorities are permitted to process data without the need of the data subject's consent. For instance, this applies where the personal data is necessary for employers with regard to issues relating to public health.