Most organisations routinely process data but are perhaps not aware that data protection is regulated at EU level. There are strict requirements and rules on how data is collected, stored and used. Failure to comply with the EU Directive 95/46/EC1 (the so-called ’Data Protection Directive’) can lead to prosecution and fines.
This briefing note outlines the main features of the EU legislation on data protection, defines the terminology used and explains where NGOs can find out more information in order to implement the Directive.
Data protection is particularly important in relation with public health. In fact, the Data Protection Directive places heightened restrictions on the collection and use of ’special categories’ such as ’personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, and [...] data concerning health or sex life’ [article 8(1)].

