ABSTRACT
The report on data protection law in relation to medical research in Luxembourg has been written in the framework of the Privacy in Medical Research and Law (PRIVIREAL) Project as part of a European comparative study of the implementation of Data Protection Directive 95/46/EC in domestic laws. This chapter focuses on important points in relation to the main principles of data protection in relation to medical research. Article 2 of the Luxembourg Data Protection Law defines the notion of personal data as any information concerning an identified or identifiable person. Article 2 of the Luxembourg Data Protection Law defines a data subject as any natural or legal person, public or private, being the object of a processing operation on personal data. Article 4(1)a of the Luxembourg Data Protection Law states that data must be collected for determinate, explicit and legitimate purposes, and not further processed in a way incompatible with the original purpose.
