Methodology of accessing various data, including personal data, for statistical or research purposes in secure environments

Delivering secure services (also known as "Secure Bubbles”) comprising infrastructure storing primary data, including personal data, notably via biometric access control measures and end-to-end encrypted connections through specific physical devices (known as SD-Box) from locations identified by their network address and managed by a dedicated contract signed with CASD. The secure services include the way and method the accredited users may access the stored data, the operation of the secure environment and the process that starts with contracting with co-controllers (data producers) and accredited users and covers the storing of data (shared by co-controllers) by CASD on his own servers and access control (excluding the authorization process to extract any anonymised outcome from the Secure Bubbles).

KTH-E02-F03-1e GDPR PPS - Evaluation methodology (On-site assessment, Remote assessment, Interviews and questionnaires, Documentation overview, Data flow mapping, Data minimisationchecks, Access control, Securitisation procedures, Risk Analysis, Privacy incident handling ... etc.)

TAM CERT Hungary Inspection and Certification Ltd. certifies that the Target of Evaluation is complying with the applicable requirements of the Certification Scheme (EP-CS.1 Europrivacy™/® GDPR Certification Scheme - General Specification and Requirements (v77), KTH-E02/F03 GDPR – Products, Processes & Services (PPS)Certification (v4), NAIH - Requirement under Article 43 (1) letter b) of the General Data Protection Regulation to accredit a certification body under Article 43 of the GDPR (data protection certification body) as a complement to ISO/IEC 17065

The Certificate was issued after the accredited Certification Body fully conducted the conformity assessment procedure according to the Europrivacy GDPR Scheme with regard to the Target of Evaluation, and as a result of the procedure made a positive certification decision on the basis of compliance with the relevant criteria