9.3.3. Specific regulations on data protection

98 

Anonymization by aggregation of results

For evaluation of and communication on the exposure assessment and for the decision on RMMs, it is useful to statistically aggregate BM results of several participants. This is done by estimating parameters of the statistical distribution of the measured values, e.g. a mean value or the 90th percentile. The aggregation also makes the data anonymous as a side effect. The disadvantage of this approach is that information is lost with every data aggregation. If the distribution is described in much detail, e.g. with confidence intervals or ranges, and if the third party has further information, this procedure does not completely exclude the possibility that the third party can assign approximate BM results to individual persons.

9.3.3. Specific regulations on data protection

EU GDPR

The General Data Protection Regulation 2016/679 (EU GDPR) for example, implemented in 2018, is a regulation in EU law on data protection and privacy in the European Union and the European Economic Areas. It extensively describes rights and duties of all parties concerned when processing personal data. Important principles are lawfulness, fairness and transparency, purpose limitation, data minimization, accuracy, storage limitation, and integrity and confidentiality. Though it was drafted and passed by the European Union (EU), it imposes obligations onto organizations anywhere, so long as they target or collect data related to people in the EU. http://data.europa.eu/eli/reg/2016/679/2016-05-04 http://data.europa.eu/eli/reg/2016/679/2016-05-04

OCCUPATIONAL BIOMONITORING GUIDANCE DOCUMENT © OECD 2022