United Kingdom ECR

Charles Tannock

Country: United Kingdom
Group: European Conservatives and Reformists (ECR)
Party: Conservative Party (CON)

Member of Foreign Affairs

Overview Charles Tannock

Amendments: 16
...stronger: 1
...weaker: 14
...neutral: 1

Amendments by Charles Tannock

(25) Consent should be given explicitly by any appropriate method enabling a freely given specific and informed indication of the data subject’s wishes, either by a statement or by a clear affirmative action by the data subject, ensuring that individuals are aware that they give their consent to the processing of personal data, including by ticking a box when visiting an Internet website or by any other statement or conduct which clearly indicates in this context the data subject’s acceptance of the proposed processing of their personal data. The act of seeking and agreeing to specific healthcare treatment should be considered as consent within the meaning of Articles 4(8) and 6(1)(a) to the processing of personal health data related to that specific treatment and as meeting the burden of proof under Article 7(1), without preventing Member States from maintaining existing more stringent national rules in this regard. Silence or inactivity should therefore not constitute consent. Consent should cover all processing activities carried out for the same purpose or purposes. If the data subject’s consent is to be given following an electronic request, the request must be clear, concise and not unnecessarily disruptive to the use of the service for which it is provided.
 
(53) Any person should have the right to have personal data concerning them rectified and a ‘right to be forgotten’ where the retention of such data is not in compliance with this Regulation. In particular, data subjects should have the right that their personal data are erased and no longer processed, where the data are no longer necessary in relation to the purposes for which the data are collected or otherwise processed, where data subjects have withdrawn their consent for processing or where they object to the processing of personal data concerning them or where the processing of their personal data otherwise does not comply with this Regulation. This right is particularly relevant, when the data subject has given their consent as a child, when not being fully aware of the risks involved by the processing, and later wants to remove such personal data especially on the Internet. However, the further retention of the data should be allowed where it is necessary for historical, statistical and scientific research purposes, for reasons of public interest in the area of public healthhealth purposes in accordance with Article 81, for exercising the right of freedom of expression, when required by law or where there is a reason to restrict the processing of the data instead of erasing them.
 
(8) ‘the data subject’s consent’ means any freely given specific, informed and explicit and informed indication of his or her wishes by which the data subject, either by a statement or by a clear affirmative action, signifies agreement to personal data relating to them being processed;
 
(b) collected for specified, explicit and legitimate purposes and not further processed in a way incompatible with those purposes; further processing of data for health, historical, statistical, or scientific purposes shall not be considered as incompatible subject to compliance with the conditions in Article 81 or Article 83 as appropriate;
 
4. Consent shall not provide a legal basis for the processing, where there is a significant imbalance or coercive relationship between the position of the data subject and the controller. The patient-healthcare provider relationship is not considered a significantly imbalanced or coercive relationship.
 
(da) the data are processed for health, historical, statistical or scientific research purposes subject to the conditions and safeguards referred to in Articles 81 or 83 as appropriate, and the provision of such information proves impossible or would involve a disproportionate effort.
 
(b) for reasons of public interest in the area of public health in health purposes in accordance with Article 81;
 
(ba) for maintaining medical records for prevention, medical diagnosis, treatment, palliative care, clinical trials, patient registries, and other health research and medical innovation purposes;
 
1. Member States shall provide for exemptions or derogations from the provisions on the general principles in Chapter II, the rights of the data subject in Chapter III, on controller and processor in Chapter IV, on the transfer of personal data to third countries and international organisations in Chapter V, the independent supervisory authorities in Chapter VI and on co-operation and consistency in Chapter VII for and the provisions regarding processing concerning health and processing for historical, statistical and scientific research purposes in this chapter whenever this is necessary for the processing of personal data carried out solely for journalistic purposes or the purpose of artistic or literary expression in order to reconcile the right to the protection of personal data with the rules governing freedom of expression.
 
1a. The European Data Protection Board shall issue guidance on when exemptions or derogations in accordance with paragraph 1 may be necessary, after consultation with representatives of the press, authors and artists, data subjects and civil society organisations.
 
(c) other reasons of public interest in areas such as social protection, especially in order to ensure the quality and cost- effectiveness of the procedures used for settling claims for benefits and services in the health insurance system. and the provision of health services.
 
2a. Where the data subject is required to give consent for the processing of personal data relating to health, the option of broad consent should be available. Member States may in any case provide for exceptions to the requirement of consent for the use of personal data for research, as referred to in paragraph 2, with regard to research that serves a high public interest. Such exemptions for processing shall be subject to a requirement that it be carried out if reasonable using anonymised or pseudonymised data. Data must be anonymised or pseudonymised under the highest technical standards and all necessary measures shall be taken to prevent re-identification of the data subjects.
 
3b. Within the limits of this Regulation, personal data may be processed for the purposes of a manufacturer's regulatory pre- and post-marketing obligations with respect to clinical evaluation of medical devices.
 
1a. Further processing of data for historical, statistical or scientific research purposes shall not be considered as incompatible with Article 5(1)(b) provided that the processing: (a) is subject to the conditions and safeguards of this Article; and (b) complies with all other relevant legislation.
 
2a. Where the data subject is required to give his/her consent under this article, the option of broad consent should be available.
 
3a. A controller or processor may transfer personal data to a third country or an international organisation for historical, statistical or scientific research purposes if: (a) these purposes cannot reasonably be fulfilled by processing data which does not permit or not any longer permit the identification of the data subject; (b) the recipient does not reasonably have access to data enabling the attribution of information to an identified or identifiable data subject; and (c) contractual clauses between the controller or processor and the recipient of the data prohibit re-identification of the data subject and limit processing in accordance with the conditions and safeguards laid down in this Article.