The Irish Take - GDPR and Research

The Health Research Regulations (HRRs) were signed into law on the 8th August 2018, and represent the Irish take on GDPR and Research. They have had a significant impact on the conduct of research in Ireland, and a number of articles have been published in relation to difficulties experienced by the research community.

Academic articles have focussed among other matters on the decision to require 'explicit consent for processing of personal data' as a safeguard, as opposed to informed consent to take part in research.

The initial HRRs (August 2018) required 'explicit consent' or a 'consent declaration' from the Health Research Consent Declaration Committee.

Links to three academic articles which critiqued the original HRRs are listed below:

The Department of Health in the Republic of Ireland has robustly defended its decision in relation to 'explicit consent'.

The European Take

Decisions as to which safeguards to implement in respect of scientific research and GDPR vary across EU Member States - see European Commission Report (Feb 2021)

The European Data Protection Board also provided an initial reponse to questions from the European Commission on the consistent application of GDPR focussing on health research- see responses (Feb 2021).

The Irish Take Revisited

Amendments (January 2021) to the Health Research Regulations provided for exemptions to the requirement for 'explicit consent' or a 'consent declaration' most noticeably for {i} pre-screening (subject to conditions) and (ii) 'low risk, high transparency retrospective chart review studies' (subjection to conditions). 'Explicit consent' remains the default position however.

Beaumont Hospital

This table (updated 8 June 2021) displays the latest exemptions in the overall context of GDPR, and the original Health Research Regulations 2018, and local policy/practice.