Preserving the Privacy of Data Subjects

1. GDPR Article 1:
   5. kept in a form which permits identification of {_data_subjects} for no longer than is necessary for the purposes for which the {_personal_data} are processed; {_personal_data} may be stored for longer periods insofar as the {_personal_data} will be processed solely for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Article 89(1) subject to implementation of the appropriate technical and organisational measures required by this Regulation in order to safeguard the rights and freedoms of the {_data_subject} ('storage limitation');
   6. processed in a manner that ensures appropriate security of the {_personal_data}, including protection against unauthorised or unlawful {_processing} and against accidental loss, destruction or damage, using appropriate technical or organisational measures ('integrity and confidentiality').
2. UNESCO Universal Declaration on Bioethics and Human Rights
   • The privacy of the persons concerned and the confidentiality of their personal information should be respected. To the greatest extent possible, such information should not be used or disclosed for purposes other than those for which it was collected or consented to, consistent with international law, in particular international human rights law.
3. Chatham House Model Data Sharing Agreement
   • Through this {_Agreement}, the {_Parties} create and will implement shared rules and cooperative mechanisms that are:
     5. Protective of privacy interests implicated by the collection, sharing, and analysis of public health surveillance data