Recital 39

(39) Any processing of personal data for the purpose of implementing this Regulation should be fully compliant with Regulation (EU) 2016/679, Regulation (EU) 2018/1725 of the European Parliament and of the Council (23) and Directive 2002/58/EC of the European Parliament and of the Council (24). Processing of personal data should be limited to what is strictly necessary and, whenever possible, those data should be anonymised. In particular, the operation of the EWRS should provide for specific safeguards for the safe and lawful exchange of personal data for the purpose of contact-tracing measures implemented by Member States at national level. In this regard, the EWRS includes a messaging function in which personal data, including contact and health data, can be communicated where necessary to relevant authorities involved in contact-tracing measures, medical evacuation or other cross-border procedures. In the case of cooperation between the health authorities of the Union and third countries, the WHO or other international organisations, transfers of personal data to third countries or international organisations should always comply with the obligations laid down under Regulation (EU) 2018/1725.

← Recital 38 · All articles · Recital 40 →

Source: EUR-Lex (Cellar) · retrieved 2026-11-06 · Text as adopted (Official Journal); later amendments are not incorporated in this text.