{"id":11686,"date":"2021-04-21T23:00:57","date_gmt":"2021-04-21T21:00:57","guid":{"rendered":"https:\/\/blogdelarechercheclinique.com\/?p=11686"},"modified":"2025-06-12T14:49:55","modified_gmt":"2025-06-12T12:49:55","slug":"gdrp-assessment-after-processing","status":"publish","type":"post","link":"https:\/\/blogdelarechercheclinique.com\/en\/gdrp-assessment-after-processing\/","title":{"rendered":"GDPR: Can an impact assessment be made after once the processing has begun?"},"content":{"rendered":"<p>Hello everyone, this is Manon DURAND, health lawyer at Pharmaspecific. We are meeting today to talk about the General Data Protection Regulation (the GDPR) which is, I remind you, the reference text in terms of personal data protection and which came into force in the European Union on May 25, 2018.<\/p>\n<p><iframe title=\"#46 RGPD : peut-on faire une analyse d&#039;impact \u00e0 posteriori?\" width=\"1080\" height=\"608\" data-src=\"https:\/\/www.youtube.com\/embed\/-b1BRzLu4Xs?feature=oembed\" frameborder=\"0\" allow=\"accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share\" referrerpolicy=\"strict-origin-when-cross-origin\" allowfullscreen src=\"data:image\/svg+xml;base64,PHN2ZyB3aWR0aD0iMSIgaGVpZ2h0PSIxIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciPjwvc3ZnPg==\" class=\"lazyload\" data-load-mode=\"1\"><\/iframe><\/p>\n<p>The question of the day is whether it is possible to implement a data protection impact assessment <em>a posteriori<\/em>, i.e. once the processing has already begun. The impact assessment is a tool to ensure <a href=\"https:\/\/blogdelarechercheclinique.com\/en\/\"><strong>compliance with the GDPR<\/strong><\/a> and is intended for processing operations that could generate high risks for the rights and freedoms of the data subjects, i.e., it balances the security measures implemented by the data controller with the rights and freedoms of the data subjects.<\/p>\n<p>So, in practice, the impact assessment can be done as you wish, but the CNIL provides a software called PIA that allows you to perform your impact assessment in a very clear and simple way. So, you can use this software and it is better for all these reasons to set up the impact assessment before your processing because it will allow you, if you find that some security measures are insufficient or are badly used, to adopt corrections before your processing.<\/p>\n<p>However, the GDPR is not always straightforward so you may have forgotten to implement your impact assessment. If this is the case, there is nothing to stop you from doing it anyway during your processing. This will allow you, if you have corrections to make on certain security measures, to identify and implement them and, otherwise, if you identify a data breach, you can still notify the CNIL to be truly in <a href=\"https:\/\/blogdelarechercheclinique.com\/en\/\"><strong>compliance with the GDPR<\/strong><\/a>.<\/p>\n<p>In conclusion, the impact assessment is preferably set up before the processing, but nothing prevents you from setting it up during your processing if you have not been able to do it before. Please refer to the CNIL website to know in which case you have to set up an impact assessment. And I remind you that this is the responsibility of the data controller with the help of his processor, if necessary.<\/p>\n<p>That&rsquo;s it for this video, I hope you liked it. If you did, don&rsquo;t hesitate to subscribe to our channel and to like this video and you will find in the information bar information on our services and in particular the monthly legal watch and the legal advice in clinical research. As for me, I&rsquo;ll see you soon for a new video.{:}<\/p>","protected":false},"excerpt":{"rendered":"<p>We are meeting today to talk about the General Data Protection Regulation (the GDPR) which is, I remind you, the reference text in terms of personal data protection and which came into force in the European Union on May 25, 2018.<\/p>","protected":false},"author":4,"featured_media":14361,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"om_disable_all_campaigns":false,"rop_custom_images_group":[],"rop_custom_messages_group":[],"rop_publish_now":"initial","rop_publish_now_accounts":{"facebook_122143508198123560_331463380343150":""},"rop_publish_now_history":[],"rop_publish_now_status":"pending","_sitemap_exclude":false,"_sitemap_priority":"","_sitemap_frequency":"","_exactmetrics_skip_tracking":false,"_exactmetrics_sitenote_active":false,"_exactmetrics_sitenote_note":"","_exactmetrics_sitenote_category":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[873],"tags":[],"class_list":{"0":"post-11686","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-clinical-research-news"},"translation":{"provider":"WPGlobus","version":"3.0.2","language":"en","enabled_languages":["fr","en"],"languages":{"fr":{"title":true,"content":true,"excerpt":true},"en":{"title":false,"content":false,"excerpt":false}}},"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v26.9 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>GDRP an impact assessment be made after once the processing<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/blogdelarechercheclinique.com\/en\/gdrp-assessment-after-processing\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"GDPR: Can an impact assessment be made after once the processing has begun? -\" \/>\n<meta property=\"og:url\" content=\"https:\/\/blogdelarechercheclinique.com\/en\/gdrp-assessment-after-processing\/\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/blogdelarechercheclinique\" \/>\n<meta property=\"article:published_time\" content=\"2021-04-21T21:00:57+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-06-12T12:49:55+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/blogdelarechercheclinique.com\/blog-contenu\/uploads\/2024\/06\/analyse-dimpact-RGPD.png\" \/>\n\t<meta property=\"og:image:width\" content=\"555\" \/>\n\t<meta property=\"og:image:height\" content=\"310\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Vanessa Montanari\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Vanessa Montanari\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/blogdelarechercheclinique.com\/gdrp-assessment-after-processing\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/blogdelarechercheclinique.com\/gdrp-assessment-after-processing\/\"},\"author\":{\"name\":\"Vanessa Montanari\",\"@id\":\"https:\/\/blogdelarechercheclinique.com\/#\/schema\/person\/13ee3f7a1251afe7e98918a482685938\"},\"headline\":\"GDPR: Can an impact assessment be made after once the processing has begun?\",\"datePublished\":\"2021-04-21T21:00:57+00:00\",\"dateModified\":\"2025-06-12T12:49:55+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/blogdelarechercheclinique.com\/gdrp-assessment-after-processing\/\"},\"wordCount\":444,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/blogdelarechercheclinique.com\/#organization\"},\"image\":{\"@id\":\"https:\/\/blogdelarechercheclinique.com\/gdrp-assessment-after-processing\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/i0.wp.com\/blogdelarechercheclinique.com\/blog-contenu\/uploads\/2024\/06\/analyse-dimpact-RGPD.png?fit=555%2C310&ssl=1\",\"articleSection\":[\"Clinical Research News\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/blogdelarechercheclinique.com\/gdrp-assessment-after-processing\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/blogdelarechercheclinique.com\/gdrp-assessment-after-processing\/\",\"url\":\"https:\/\/blogdelarechercheclinique.com\/gdrp-assessment-after-processing\/\",\"name\":\"GDRP an impact assessment be made after once the processing\",\"isPartOf\":{\"@id\":\"https:\/\/blogdelarechercheclinique.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/blogdelarechercheclinique.com\/gdrp-assessment-after-processing\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/blogdelarechercheclinique.com\/gdrp-assessment-after-processing\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/i0.wp.com\/blogdelarechercheclinique.com\/blog-contenu\/uploads\/2024\/06\/analyse-dimpact-RGPD.png?fit=555%2C310&ssl=1\",\"datePublished\":\"2021-04-21T21:00:57+00:00\",\"dateModified\":\"2025-06-12T12:49:55+00:00\",\"description\":\"GDRP : Can an impact assessment be made after once the processing has begun? That's it for this video, I hope you liked it.\",\"breadcrumb\":{\"@id\":\"https:\/\/blogdelarechercheclinique.com\/gdrp-assessment-after-processing\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/blogdelarechercheclinique.com\/gdrp-assessment-after-processing\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/blogdelarechercheclinique.com\/gdrp-assessment-after-processing\/#primaryimage\",\"url\":\"https:\/\/i0.wp.com\/blogdelarechercheclinique.com\/blog-contenu\/uploads\/2024\/06\/analyse-dimpact-RGPD.png?fit=555%2C310&ssl=1\",\"contentUrl\":\"https:\/\/i0.wp.com\/blogdelarechercheclinique.com\/blog-contenu\/uploads\/2024\/06\/analyse-dimpact-RGPD.png?fit=555%2C310&ssl=1\",\"width\":555,\"height\":310,\"caption\":\"analyse d'impact RGPD\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/blogdelarechercheclinique.com\/gdrp-assessment-after-processing\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Accueil\",\"item\":\"https:\/\/blogdelarechercheclinique.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"GDPR: Can an impact assessment be made after once the processing has begun?\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/blogdelarechercheclinique.com\/#website\",\"url\":\"https:\/\/blogdelarechercheclinique.com\/\",\"name\":\"Blog de la recherche clinique\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\/\/blogdelarechercheclinique.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/blogdelarechercheclinique.com\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/blogdelarechercheclinique.com\/#organization\",\"name\":\"Blog de la recherche clinique\",\"url\":\"https:\/\/blogdelarechercheclinique.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/blogdelarechercheclinique.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/i0.wp.com\/blogdelarechercheclinique.com\/blog-contenu\/uploads\/2024\/04\/cropped-BLOG-logo.png?fit=512%2C512&ssl=1\",\"contentUrl\":\"https:\/\/i0.wp.com\/blogdelarechercheclinique.com\/blog-contenu\/uploads\/2024\/04\/cropped-BLOG-logo.png?fit=512%2C512&ssl=1\",\"width\":512,\"height\":512,\"caption\":\"Blog de la recherche clinique\"},\"image\":{\"@id\":\"https:\/\/blogdelarechercheclinique.com\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/blogdelarechercheclinique\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/blogdelarechercheclinique.com\/#\/schema\/person\/13ee3f7a1251afe7e98918a482685938\",\"name\":\"Vanessa Montanari\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/blogdelarechercheclinique.com\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/ddf428208f542d6c2239ace6606ebe9beb71049642a9c784967f23e4e76e8efc?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/ddf428208f542d6c2239ace6606ebe9beb71049642a9c784967f23e4e76e8efc?s=96&d=mm&r=g\",\"caption\":\"Vanessa Montanari\"},\"url\":\"https:\/\/blogdelarechercheclinique.com\/en\/author\/vanessa\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"GDRP an impact assessment be made after once the processing","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/blogdelarechercheclinique.com\/en\/gdrp-assessment-after-processing\/","og_locale":"en_US","og_type":"article","og_title":"GDPR: Can an impact assessment be made after once the processing has begun? -","og_url":"https:\/\/blogdelarechercheclinique.com\/en\/gdrp-assessment-after-processing\/","article_publisher":"https:\/\/www.facebook.com\/blogdelarechercheclinique","article_published_time":"2021-04-21T21:00:57+00:00","article_modified_time":"2025-06-12T12:49:55+00:00","og_image":[{"width":555,"height":310,"url":"https:\/\/blogdelarechercheclinique.com\/blog-contenu\/uploads\/2024\/06\/analyse-dimpact-RGPD.png","type":"image\/png"}],"author":"Vanessa Montanari","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Vanessa Montanari","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/blogdelarechercheclinique.com\/gdrp-assessment-after-processing\/#article","isPartOf":{"@id":"https:\/\/blogdelarechercheclinique.com\/gdrp-assessment-after-processing\/"},"author":{"name":"Vanessa Montanari","@id":"https:\/\/blogdelarechercheclinique.com\/#\/schema\/person\/13ee3f7a1251afe7e98918a482685938"},"headline":"GDPR: Can an impact assessment be made after once the processing has begun?","datePublished":"2021-04-21T21:00:57+00:00","dateModified":"2025-06-12T12:49:55+00:00","mainEntityOfPage":{"@id":"https:\/\/blogdelarechercheclinique.com\/gdrp-assessment-after-processing\/"},"wordCount":444,"commentCount":0,"publisher":{"@id":"https:\/\/blogdelarechercheclinique.com\/#organization"},"image":{"@id":"https:\/\/blogdelarechercheclinique.com\/gdrp-assessment-after-processing\/#primaryimage"},"thumbnailUrl":"https:\/\/i0.wp.com\/blogdelarechercheclinique.com\/blog-contenu\/uploads\/2024\/06\/analyse-dimpact-RGPD.png?fit=555%2C310&ssl=1","articleSection":["Clinical Research News"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/blogdelarechercheclinique.com\/gdrp-assessment-after-processing\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/blogdelarechercheclinique.com\/gdrp-assessment-after-processing\/","url":"https:\/\/blogdelarechercheclinique.com\/gdrp-assessment-after-processing\/","name":"GDRP an impact assessment be made after once the processing","isPartOf":{"@id":"https:\/\/blogdelarechercheclinique.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/blogdelarechercheclinique.com\/gdrp-assessment-after-processing\/#primaryimage"},"image":{"@id":"https:\/\/blogdelarechercheclinique.com\/gdrp-assessment-after-processing\/#primaryimage"},"thumbnailUrl":"https:\/\/i0.wp.com\/blogdelarechercheclinique.com\/blog-contenu\/uploads\/2024\/06\/analyse-dimpact-RGPD.png?fit=555%2C310&ssl=1","datePublished":"2021-04-21T21:00:57+00:00","dateModified":"2025-06-12T12:49:55+00:00","description":"GDRP : Can an impact assessment be made after once the processing has begun? That's it for this video, I hope you liked it.","breadcrumb":{"@id":"https:\/\/blogdelarechercheclinique.com\/gdrp-assessment-after-processing\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/blogdelarechercheclinique.com\/gdrp-assessment-after-processing\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/blogdelarechercheclinique.com\/gdrp-assessment-after-processing\/#primaryimage","url":"https:\/\/i0.wp.com\/blogdelarechercheclinique.com\/blog-contenu\/uploads\/2024\/06\/analyse-dimpact-RGPD.png?fit=555%2C310&ssl=1","contentUrl":"https:\/\/i0.wp.com\/blogdelarechercheclinique.com\/blog-contenu\/uploads\/2024\/06\/analyse-dimpact-RGPD.png?fit=555%2C310&ssl=1","width":555,"height":310,"caption":"analyse d'impact RGPD"},{"@type":"BreadcrumbList","@id":"https:\/\/blogdelarechercheclinique.com\/gdrp-assessment-after-processing\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Accueil","item":"https:\/\/blogdelarechercheclinique.com\/"},{"@type":"ListItem","position":2,"name":"GDPR: Can an impact assessment be made after once the processing has begun?"}]},{"@type":"WebSite","@id":"https:\/\/blogdelarechercheclinique.com\/#website","url":"https:\/\/blogdelarechercheclinique.com\/","name":"Blog de la recherche clinique","description":"","publisher":{"@id":"https:\/\/blogdelarechercheclinique.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/blogdelarechercheclinique.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/blogdelarechercheclinique.com\/#organization","name":"Blog de la recherche clinique","url":"https:\/\/blogdelarechercheclinique.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/blogdelarechercheclinique.com\/#\/schema\/logo\/image\/","url":"https:\/\/i0.wp.com\/blogdelarechercheclinique.com\/blog-contenu\/uploads\/2024\/04\/cropped-BLOG-logo.png?fit=512%2C512&ssl=1","contentUrl":"https:\/\/i0.wp.com\/blogdelarechercheclinique.com\/blog-contenu\/uploads\/2024\/04\/cropped-BLOG-logo.png?fit=512%2C512&ssl=1","width":512,"height":512,"caption":"Blog de la recherche clinique"},"image":{"@id":"https:\/\/blogdelarechercheclinique.com\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/blogdelarechercheclinique"]},{"@type":"Person","@id":"https:\/\/blogdelarechercheclinique.com\/#\/schema\/person\/13ee3f7a1251afe7e98918a482685938","name":"Vanessa Montanari","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/blogdelarechercheclinique.com\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/ddf428208f542d6c2239ace6606ebe9beb71049642a9c784967f23e4e76e8efc?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/ddf428208f542d6c2239ace6606ebe9beb71049642a9c784967f23e4e76e8efc?s=96&d=mm&r=g","caption":"Vanessa Montanari"},"url":"https:\/\/blogdelarechercheclinique.com\/en\/author\/vanessa\/"}]}},"jetpack_featured_media_url":"https:\/\/i0.wp.com\/blogdelarechercheclinique.com\/blog-contenu\/uploads\/2024\/06\/analyse-dimpact-RGPD.png?fit=555%2C310&ssl=1","jetpack-related-posts":[{"id":11683,"url":"https:\/\/blogdelarechercheclinique.com\/en\/clinical-study-technicians-gdrp\/","url_meta":{"origin":11686,"position":0},"title":"Are clinical study technicians (CSTs) responsible, at their level, for implementing the obligations related to the GDPR or whether it happens at another level?","author":"Vanessa Montanari","date":"21 April 2021","format":false,"excerpt":"We are meeting today once again to talk about the GDPR, the General Data Protection Regulation which is, I remind you, the reference text in terms of personal data protection within the EU. It came into force on May 25, 2018 in the EU member states.","rel":"","context":"In &quot;Clinical Research News&quot;","block_context":{"text":"Clinical Research News","link":"https:\/\/blogdelarechercheclinique.com\/en\/category\/clinical-research-news\/"},"img":{"alt_text":"Technicien en \u00e9tude clinique","src":"https:\/\/i0.wp.com\/blogdelarechercheclinique.com\/blog-contenu\/uploads\/2024\/06\/TEC.png?fit=550%2C307&ssl=1&resize=350%2C200","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/blogdelarechercheclinique.com\/blog-contenu\/uploads\/2024\/06\/TEC.png?fit=550%2C307&ssl=1&resize=350%2C200 1x, https:\/\/i0.wp.com\/blogdelarechercheclinique.com\/blog-contenu\/uploads\/2024\/06\/TEC.png?fit=550%2C307&ssl=1&resize=525%2C300 1.5x"},"classes":[]},{"id":13605,"url":"https:\/\/blogdelarechercheclinique.com\/en\/company-uses-anonymisation-gdrp-apply\/","url_meta":{"origin":11686,"position":1},"title":"When a company uses anonymisation, does the GDPR apply to it?","author":"Vanessa Montanari","date":"7 May 2024","format":false,"excerpt":"he GDPR went into effect on May 25, 2018 in the EU member states. But it is not always very simple to apply.","rel":"","context":"In &quot;Practice the profession of Clinical Research Associate&quot;","block_context":{"text":"Practice the profession of Clinical Research Associate","link":"https:\/\/blogdelarechercheclinique.com\/en\/category\/practice-the-profession-cra\/"},"img":{"alt_text":"Anonymisation et RGPD","src":"https:\/\/i0.wp.com\/blogdelarechercheclinique.com\/blog-contenu\/uploads\/2021\/04\/Anonymisation-RGPD.jpg?fit=450%2C300&ssl=1&resize=350%2C200","width":350,"height":200},"classes":[]},{"id":11689,"url":"https:\/\/blogdelarechercheclinique.com\/en\/dpo-data-protection-officer\/","url_meta":{"origin":11686,"position":2},"title":"How do I become a DPO (Data Protection Officer)?","author":"Vanessa Montanari","date":"21 April 2021","format":false,"excerpt":"The question of the day is how to become a DPO. As a reminder, the DPO or data protection officer, is the person who will take care of the compliance of the company that has appointed him to the GDPR. That is to say, he is the one who will\u2026","rel":"","context":"In &quot;Becoming a Clinical Research Associate: training, funding&quot;","block_context":{"text":"Becoming a Clinical Research Associate: training, funding","link":"https:\/\/blogdelarechercheclinique.com\/en\/category\/becoming-a-clinical-research-associate-training-funding\/"},"img":{"alt_text":"D\u00e9l\u00e9gu\u00e9 \u00e0 la protection des donn\u00e9es","src":"https:\/\/i0.wp.com\/blogdelarechercheclinique.com\/blog-contenu\/uploads\/2024\/06\/DPO.png?fit=552%2C308&ssl=1&resize=350%2C200","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/blogdelarechercheclinique.com\/blog-contenu\/uploads\/2024\/06\/DPO.png?fit=552%2C308&ssl=1&resize=350%2C200 1x, https:\/\/i0.wp.com\/blogdelarechercheclinique.com\/blog-contenu\/uploads\/2024\/06\/DPO.png?fit=552%2C308&ssl=1&resize=525%2C300 1.5x"},"classes":[]},{"id":13617,"url":"https:\/\/blogdelarechercheclinique.com\/en\/dpo-based-outside-european-union\/","url_meta":{"origin":11686,"position":3},"title":"GDRP : Can the DPO be based outside the European Union?","author":"Vanessa Montanari","date":"21 April 2021","format":false,"excerpt":"The question of the day is whether it is possible to appoint a DPO who is located outside the European Union.","rel":"","context":"In &quot;Clinical Research News&quot;","block_context":{"text":"Clinical Research News","link":"https:\/\/blogdelarechercheclinique.com\/en\/category\/clinical-research-news\/"},"img":{"alt_text":"Designer un DPO hors UE","src":"https:\/\/i0.wp.com\/blogdelarechercheclinique.com\/blog-contenu\/uploads\/2021\/04\/Outside-UE.png?fit=1138%2C562&ssl=1&resize=350%2C200","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/blogdelarechercheclinique.com\/blog-contenu\/uploads\/2021\/04\/Outside-UE.png?fit=1138%2C562&ssl=1&resize=350%2C200 1x, https:\/\/i0.wp.com\/blogdelarechercheclinique.com\/blog-contenu\/uploads\/2021\/04\/Outside-UE.png?fit=1138%2C562&ssl=1&resize=525%2C300 1.5x, https:\/\/i0.wp.com\/blogdelarechercheclinique.com\/blog-contenu\/uploads\/2021\/04\/Outside-UE.png?fit=1138%2C562&ssl=1&resize=700%2C400 2x, https:\/\/i0.wp.com\/blogdelarechercheclinique.com\/blog-contenu\/uploads\/2021\/04\/Outside-UE.png?fit=1138%2C562&ssl=1&resize=1050%2C600 3x"},"classes":[]},{"id":11692,"url":"https:\/\/blogdelarechercheclinique.com\/en\/gdrp-certification-company-compliant\/","url_meta":{"origin":11686,"position":4},"title":"Is there an GDPR certification? How can I prove that my company is GDRP compliant?","author":"Vanessa Montanari","date":"21 April 2021","format":false,"excerpt":"We're meeting again to talk about the General Data Protection Regulation (the GDPR), which is the reference text in terms of personal data protection, and which came into force in the European Union on May 25, 2018.","rel":"","context":"In &quot;Clinical Research News&quot;","block_context":{"text":"Clinical Research News","link":"https:\/\/blogdelarechercheclinique.com\/en\/category\/clinical-research-news\/"},"img":{"alt_text":"Certification RGPD","src":"https:\/\/i0.wp.com\/blogdelarechercheclinique.com\/blog-contenu\/uploads\/2024\/06\/Certification-RGPD.png?fit=552%2C307&ssl=1&resize=350%2C200","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/blogdelarechercheclinique.com\/blog-contenu\/uploads\/2024\/06\/Certification-RGPD.png?fit=552%2C307&ssl=1&resize=350%2C200 1x, https:\/\/i0.wp.com\/blogdelarechercheclinique.com\/blog-contenu\/uploads\/2024\/06\/Certification-RGPD.png?fit=552%2C307&ssl=1&resize=525%2C300 1.5x"},"classes":[]},{"id":11698,"url":"https:\/\/blogdelarechercheclinique.com\/en\/gdrp-data-transfer-company\/","url_meta":{"origin":11686,"position":5},"title":"GDPR\/clinical research: do patients have the right to retrieve their data in order to transfer it to a concurrent company?","author":"Vanessa Montanari","date":"21 April 2021","format":false,"excerpt":"The topic of the day is the right to data portability and more specifically, the question of whether it is possible for a participant in a clinical study to retrieve his or her data from that study and transfer it, for example, to another sponsor.","rel":"","context":"In &quot;Clinical Research News&quot;","block_context":{"text":"Clinical Research News","link":"https:\/\/blogdelarechercheclinique.com\/en\/category\/clinical-research-news\/"},"img":{"alt_text":"R\u00e9cup\u00e9ration donn\u00e9es personnelles","src":"https:\/\/i0.wp.com\/blogdelarechercheclinique.com\/blog-contenu\/uploads\/2024\/06\/droit-recuperer-donnees.png?fit=562%2C306&ssl=1&resize=350%2C200","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/blogdelarechercheclinique.com\/blog-contenu\/uploads\/2024\/06\/droit-recuperer-donnees.png?fit=562%2C306&ssl=1&resize=350%2C200 1x, https:\/\/i0.wp.com\/blogdelarechercheclinique.com\/blog-contenu\/uploads\/2024\/06\/droit-recuperer-donnees.png?fit=562%2C306&ssl=1&resize=525%2C300 1.5x"},"classes":[]}],"jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/blogdelarechercheclinique.com\/en\/wp-json\/wp\/v2\/posts\/11686","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blogdelarechercheclinique.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blogdelarechercheclinique.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blogdelarechercheclinique.com\/en\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/blogdelarechercheclinique.com\/en\/wp-json\/wp\/v2\/comments?post=11686"}],"version-history":[{"count":2,"href":"https:\/\/blogdelarechercheclinique.com\/en\/wp-json\/wp\/v2\/posts\/11686\/revisions"}],"predecessor-version":[{"id":15038,"href":"https:\/\/blogdelarechercheclinique.com\/en\/wp-json\/wp\/v2\/posts\/11686\/revisions\/15038"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/blogdelarechercheclinique.com\/en\/wp-json\/wp\/v2\/media\/14361"}],"wp:attachment":[{"href":"https:\/\/blogdelarechercheclinique.com\/en\/wp-json\/wp\/v2\/media?parent=11686"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blogdelarechercheclinique.com\/en\/wp-json\/wp\/v2\/categories?post=11686"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blogdelarechercheclinique.com\/en\/wp-json\/wp\/v2\/tags?post=11686"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}