THE DISCIPLINE IN MATERIALS OF PROTECTION OF PERSONAL DATA

Scientific rationale

Health structures treat large amounts of personal data every day, many of which belong to particular categories such as health data. The EU Regulation 2016/679 (GDPR) and the Privacy Code (Legislative Decree 196/2003, as amended by Legislative Decree 101/2018) ask that each treatment respects precise principles and that the organization defines clearly roles and responsibilities.
The course first presents the framework of regulatory sources and general principles of processing: lawfulness, fairness and transparency, limitation of purposes, minimization, accuracy, limitation of conservation, integrity and confidentiality, accountability. Then focus on subjects and privacy roles: owner, accountant, controller, authorized and DPO. It does so with practical cases taken from the health context and with the presentation of the Organizational Privacy Model of the Mondino Foundation.
The goal is to raise awareness of the rules to be respected when dealing with personal data and its role in the data protection system of the body