The CLARIFY project deals with a large amount of data generated by patients and/or healthcare professionals. Due to the sensitivity of such data, proper protocols have been put in place to ensure that all ethical concerns are addressed appropriately. This ensures that the project complies with relevant national and EU legislation. In particular, the data of the patients participating in the project will be processed and handled according to the Organic law 3/2018, of December 5th, on personal data protection and guarantee of digital rights (hereafter LOPDGDD for the Spanish abbreviation). This law adopts the Regulation (EU) 2016/679 of the European Parliament and of the Council, of 27 April 2016, with regard to the processing of personal data and on the free movement of such data (hereinafter, “GDPR”). The CLARIFY project will support the realisation of the data protection principles in all its activities, most notably:
· Lawfulness and consent
· Purpose specification and purpose limitation
· Data minimisation
· Data subject rights
· Accountability
· Data security
· Data protection by design and by default