Skip to content
Guidance · EDPB NL LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.

Guidance

Full text

Article 25 (2) and (3) of the Latvian Data Protection Law (PDPL), available at: https://likumi.lv/ta/id/300099#p32 . This PDPL provision requires consent for data processing in all cases, also for the purposes of scientific research. Secondary use of data is allowed if there are legal grounds for that as per the GDPR (inter alia, consent), or it must be compatible with the original processing purpose. Article 10(7) on the law of patients data, available at: https://likumi.lv/ta/en/en/id/203008-law-on-the- rights-of-patients . The Law on Patients’ Rights allows the secondary use of patient data for research purposes where: (i) the patient cannot be directly or indirectly identified according to the information to be analysed; or (ii) the patient has consented in writing that the information regarding him or her may be used in a specific research, or (iii) permission to process patient Milieu Consulting SPR Brussels Study on the secondary use of personal data in the context of scientific research data is granted in a special procedure by a competent authority. It is important to note that although Article 25(2) states that processing of special categories of data is possible if at least one of the grounds referred to in Article 9(2) GDPR exists, including Article 9(2)(j) GDPR, Latvian law does not provide safeguards relating to processing of personal data for scientific purposes as required under Article 89(1) of the GDPR.

How it connects

C-205/21 Criminal proceedings against V.S In Case C-205/21, the Court of Justice of the European Union (Fifth Chamber) issued a preliminary ruling responding to a request from the Spetsializiran nakazatelen sad… CJEU ·Fifth Chamber Jan 26, 2023 Types of Special Categories of Personal Data Personal Data Retention Period
C-252/21 Meta Platforms v noyb C-252/21 (Meta Platforms (noyb)) CJEU Jan 12, 2023 Supervisory Authorities IP Address Supervision
C-203/22 CK v Magistrat der Stadt Wien In Case C-203/22, the Court of Justice of the European Union interpreted Article 15(1)(h) of the GDPR in response to a preliminary ruling from the Verwaltungsgericht Wien… CJEU ·First Chamber Feb 27, 2025 Profiling Automated Decision-Making Marketing
AEPD: Data subject entitled to identity of professionals who accessed medical records Suspecting unauthorised access to his medical records, a public civil servant, the data subject, requested the Ministry of Defence, the controller, to provide a log copy of… pd-00055-2026 ·Spain ·Art. 5, 12, 15 +2 Sep 15, 2026 Personal Data Healthcare Right of Access
Finnish DPA examines anti-doping organization's GDPR compliance over public suspension An athlete (the data subject) gave a doping sample containing a low concentration of a banned substance in August 2020. The national anti-doping organisation (the controller)… TSV/179/2021 ·Finland ·Tietosuojavaltuutettu Aug 4, 2026 Supervisory Authorities Personal Data Retention Period