The European Data Protection Board has issued guidelines on the processing of personal data for scientific research related to COVID-19, indicating that the GDPR takes into account the needs of scientific research and should not be a barrier to conduct such research, while helping ensure respect for the fundamental rights of patients. However, the guidelines do not resolve all the issues that arise due to the framework’s ccomplexity. For example, it points out that there are two main options available: consent or a basis in EU Member State law. However there are the divergent requirements in national laws, preventing a uniform application of the rules and exemptions.
