GDPR Data processing modelHealth vigilance and risk management systems
By: Ludwig KarnethPurposes (2)
A purpose is the objective pursued by the setting up of your file. It indicates what the processing of personal data will be used for, its purpose. This purpose must be clear and understandable
Data categories (4)
Personal data is any information relating to an identified or identifiable natural person. A natural person can be identified either directly (eg surname and first name) or indirectly (eg phone number, social security number, email or postal address, but also voice or image)
Contact details of the person reporting the adverse health event
Data details
Data conservation rules
Active base:
limited to what the controller needs to know in order to meet its health vigilance obligations, and for a duration strictly limited to what is necessary to meet those obligations.n
data relating to the identification of the product concerned by the alert
Data details
Data conservation rules
Active base:
current data usage time
Intermediate archiving:
legal or regulatory duration applicable to each health vigilance
Destruction
Identification data of the person exposed to the event
Data details
Data conservation rules
Active base:
current data usage duration
Intermediate archiving:
legal or regulatory duration applicable to each health vigilance
Destruction
Health data of the person exposed to the event
Data details
Data conservation rules
Active base:
current data usage time.
Intermediate archiving:
legal or regulatory duration applicable to each health vigilance
Destruction
Data subject (1)
A data subject is any person whose data is collected, retained or processed by the data processing. e.g. In a recruitement process, any candidate for a position proposed in recruitement management process
- Patients
Attribution / Pas d'utilisation commerciale
CC-BY-NC
