Legal ground for processing personal data in PV (e.g., legal obligation, public interest). Consent not required for PV in EU.
Processing for PV under legal obligation and Art 89 for research.
GDPR Art 6, 9; EMA/EDPB