Spain's data protection authority, the AEPD, has released a report on personal data processing stemming from the COVID-19 outbreak. The AEPD indicated that "data protection should not be used to hinder or limit the effectiveness of the measures taken by the authorities" despite the EU General Data Protection Regulation containing "the necessary rules to legitimately allow processing" during health emergencies. Meanwhile, DPAs in Luxembourg and Switzerland published guidance on best practice for data protection during the COVID-19 pandemic. (Original post is in Spanish.)
Full Story