REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), 2016 O.J. (L 119) 1
EUROPEAN DATA PROTECTION BOARD [EDPB], Guidelines 03/2020 on the processing of data concerning health for the purpose of scientific research in the context of the COVID-19 outbreak (2020), https://edpb.europa.eu/our-work-tools/our-documents/guidelines/guidelines-032020-processing-data-concerning-health-purpose_en, at para 9-10, 13 (last visited Oct. 29, 2021).
ARTICLE 29 DATA PROTECTION WORKING PARTY [WP29], Guidelines on consent under Regulation 2016/679 (2018), https://ec.europa.eu/newsroom/article29/items/623051, at 27-28 (last visited Oct. 29, 2021).
European Data Protection Supervisor [EDPS], A Preliminary Opinion on data protection and scientific research (2020), https://edps.europa.eu/sites/edp/files/publication/20-01-06_opinion_research_en.pdf, at 23 (last visited Oct. 29, 2021)