GDPR: who are considered as vulnerable persons?

Sometimes mention is made of vulnerable natural persons in the context of the General Data Protection Regulation (GDPR).

Examples

  • babies and young children
  • pregnant women
  • the elderly
  • people with mental disorders
  • asylum seekers
  • people with disabilities
  • ethnic minorities
  • the sick and patients

These are often persons who are legally incompetent, persons who cannot give their consent, or persons who may suffer very adverse consequences if their personal data were to become publicly available.

Fulfilment of the criterion of vulnerable person is highly dependent on the context of your research. For example, a research project that incorporates political preferences will entail a much higher risk if this occurs in repressive regimes.

Implications for data processing

The processing of personal data of vulnerable persons can give rise to a risk analysis (part of which will be included in the GDPR register).

In addition, this will also affect how you must provide information to the data subjects and ask for consent from the data subjects.

More information

More tips

Translated tip


Last modified Oct. 1, 2020, 11:34 a.m.