Definition

EU General Data Protection Regulation; PV activities may rely on legal basis such as public interest or legal obligation. Data minimization and purpose limitation apply.

Example

Collecting only necessary patient/reporter data for ICSR and retaining per defined retention policy.

Regulatory source

GDPR Arts 6, 9, 89; EMA/EDPB considerations

Common mistakes

Assuming consent is always required for PV processing.

Inspector question

What legal basis do you use for processing personal data in PV?

Related terms