GDPR: who are considered to be vulnerable persons?
Sometimes mention is made of vulnerable natural persons in the context of the General Data Protection Regulation (GDPR).
- pregnant women
- the elderly
- people with mental disorders
- asylum seekers
- people with disabilities
- ethnic minorities
- the sick and patients
These are often persons who are legally incompetent, persons who cannot give their consent, or persons who may suffer very adverse consequences if their personal data were to become publicly available (see also European Commission, (2021) “Ethics in Social Science and Humanities” Guidelines, page 11).
Fulfilment of the criterion of vulnerable person is highly dependent on the context of your research. For example, a research project that incorporates political preferences will entail a much higher risk if this occurs in repressive regimes.
Implications for data processing
The processing of personal data of vulnerable persons can give rise to a risk analysis (part of which will be included in the GDPR register).
Last modified Aug. 28, 2023, 10:56 a.m.