# dataShield and GDPR

**URL:** <https://datashield.discourse.group/t/datashield-and-gdpr/211>\
**Category:** Analyst Support\
**Created:** [7 May 2020 12:11 UTC](https://datashield.discourse.group/t/datashield-and-gdpr/211 "2020-05-07T12:11:00Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![Gijs](https://avatars.discourse-cdn.com/v4/letter/g/9fc348/32.png) [@Gijs](https://datashield.discourse.group/u/Gijs)\
**Post date:** [7 May 2020 12:11 UTC](https://datashield.discourse.group/t/datashield-and-gdpr/211/1 "2020-05-07T12:11:00Z")

</div>

Hi dataSHIELD community,

I wonder if any work has been conducted regarding dataSHIELD and the GDPR. More concretely, has any work been done to demonstrate/argue that the dataSHIELD client portal does not handle any personal data? It matters if a party (such as the org managing the portal) is a data processor, as that status may require legal agreements.

---

<div class="post-metadata">

**Author:** ![daniela.zoeller](https://yyz2.discourse-cdn.com/free1/user_avatar/datashield.discourse.group/daniela.zoeller/32/16_2.png) [@daniela.zoeller](https://datashield.discourse.group/u/daniela.zoeller)\
**Post date:** [7 May 2020 12:38 UTC](https://datashield.discourse.group/t/datashield-and-gdpr/211/2 "2020-05-07T12:38:49Z")

</div>

Hi,

It is not that formal ask you probably mean, but at least we now have statement from our local data protection manager (University Medical Center in Freiburg, Germany) that we can use DataSHIELD for routine data under GDPR.

Best Daniela

---

<div class="post-metadata">

**Author:** ![Luise](https://avatars.discourse-cdn.com/v4/letter/l/f1d935/32.png) [@Luise](https://datashield.discourse.group/u/Luise)\
**Post date:** [1 September 2020 10:37 UTC](https://datashield.discourse.group/t/datashield-and-gdpr/211/3 "2020-09-01T10:37:22Z")

</div>

Hi Daniela, I am at the University of Copenhagen and we are right now working on a GDPR risk assessment with our legal team in relation to working at DataSHIELD. Would it possible for you to send me your statement for inspiration? Best wishes, Luise

---

<div class="post-metadata">

**Author:** ![nielssteenkrogh](https://avatars.discourse-cdn.com/v4/letter/n/b2d939/32.png) [@nielssteenkrogh](https://datashield.discourse.group/u/nielssteenkrogh)\
**Post date:** [9 August 2022 14:06 UTC](https://datashield.discourse.group/t/datashield-and-gdpr/211/4 "2022-08-09T14:06:10Z")

</div>

Hi Louise. Did you finalize your legal team clarification in 2020? We have a project with similar risk analysis needs and we are also from Copenhagen area (Region H legal team - DataSHIELD use in medical context)