1. Data protection

2. Available at: http://urn.fi/URN:ISBN:978-952-302-700-8
Based on EHES Manual, Part A. Planning and preparation of the survey, 2nd edition (2016)
Available at:
These slides can be used freely, translated and adapted to national use (e.g. concerning national sampling frames and sample selection criteria).

3. Aspects of safeguarding of privacy (1)
Data access: who is allowed to see all of the data
a limited number of persons are allowed to access a database that includes identification data, such as names and dates of birth
Data exchange: with whom the data can be shared
Record linkage: how the linkage is done and registers covered (for example existing health registers)

4. Aspects of safeguarding of privacy (2)
Anonymization: ensuring that the individual cannot be identified
Duration of storage of data: how long data can be kept in a database
Identification, use, and storage of biological samples

5. Anonymization
The person cannot be identified, whether by the data controller or by any other person
Taking into account of all the means likely reasonable to be used either by the controller or any other person to identify that individual
(Working Partly of the protection of individuals with regard to the processing of personal data, Article 29)

6. Safeguarding of privacy Data protection (1)
Personal Data
Direct: everything that identifies an individual
Indirect: information that can be combined with other information to identify specific individuals
Reference to an identification number or to one or more factors specific to his/her physical, physiological, mental, economic, cultural or social identity
(Regulation (EU) 2016/679 of the European Parliament and of the Council)

7. Safeguarding of privacy Data protection (2)
Data collected for HES are “personal” and thus must be safeguarded, e.g. by
Using survey specific subject ID or barcode in questionnaires and samples
No personal identification included in the questionnaire documents and samples
Computers and servers locked from others than authorized persons
No survey data kept or archived in personal user directories
Encrypted transfer for electronic data
The survey protocol should comply with national legislation (“Data Protection Act” or “Personal Data Act”)

8. Acknowledgements
Slides prepared by: Laura Paalanen and Päivikki Koponen
Experiences and feedback from the EHES network have been utilized in the preparation of these slides
Cover picture:
Funding: Preparation of the slides is part of the activities of the EHES Coordinating Centre which has received funding from the EC/DG SANTÉ in through SANCO/2008/C2/02-SI EHES and Grand Agreement number , and in through Grand Agreement number /BRIDGE Health

9. Disclaimer
The views expressed here are those of the authors and they do not represent the Commission’s official position.