Skip to main content
DraftWave 6Owner: TBDReviewers: unassignedLast review: not yet reviewed
Who should read this:Legal experts

Guide for legal experts

You check that the system respects the GDPR, the EHDS Regulation and the governance, and that responsibilities are clearly allocated.

Your questions and where to find the answers​

QuestionAnswer
Which legal acts apply to the system?2.1 Legal and regulatory constraints
Who is controller, joint controller or processor for each processing operation?8.2 Controllers, processors and responsibilities
What is the legal basis for each dataset, and how is it enforced technically?8.6 Legal basis, consent and objection
Who decides on access to which type of dataset, and as which controller?3.3 Scopes, ADR-0002 Who decides on access, per type of dataset
How does an access request flow, and who decides?6.2.4 Review and decision
What does the data use agreement control?6.3.1 Data use agreement
How are data subjects’ rights handled end to end?6.4 Exercise of data subjects’ rights
How are IP, publications and enriched data handled?6.3.6 Results, publications, IP and enriched data
Which governance requirements are not yet covered?Governance traceability
tip

The box at the top of every page shows which governance sections the page implements. The governance traceability page shows, for every governance section, where it is implemented and what is still missing.