3 The legal and contractual pillar

Data protection is a highly regulated dimension of responsible data management, particularly in Europe by the General Data Protection Regulation (GDPR). It is not always easy to fully understand the practical implications of data protection texts in the sector or how to implement the appropriate measures.

This section describes the data protection regulatory framework, its application to the humanitarian sector and the key concepts to implement.

This section is divided into 7 subsections:

• 3.1 Decoding GDPR,
• 3.2 GDPR application,
• 3.3 Data protection roles and responsabilities,
• 3.4 Data protection in the world,
• 3.5 Data sharing agreements,
• 3.6 The de-identification process,
• 3.7 Data storage periods.