Guidelines 03/2020 on the processing of data concerning health for the purpose of scientific research in the context of the COVID-19 outbreak
Section 3.2 “Processing for the purpose of scientific research”
9. Article 4 GDPR does not entail an explicit definition of “processing for the purpose of scientific research”. As indicated by Recital 159, “the term processing of personal data for scientific research purposes should be interpreted in a broad manner including for example technological development and demonstration, fundamental research, applied research and privately funded research. In addition, it should take into account the Union’s objective under Article 179 (1) TFEU of achieving a European Research Area. Scientific research purposes should also include studies conducted in the public interest in the area of public health.”
10. The former Article 29-Working-Party has already pointed out that the term may not be stretched beyond its common meaning though and understands that “scientific research” in this context means “a research project set up in accordance with relevant sector-related methodological and ethical standards, in conformity with good practice”.