Skip to content

How does Integra Cloud asume the principles of Data Protection?

Integra Cloud uses a large volume of personal data. They may include medical, genetic or biometric information for the purpose of being used for research, diagnosis, treatment or prevention of health problems.

INCLIVA has a Data Protection Unit

This unit is in charge of supervising the compliance with the General Data Protection Regulation (GDPR) and that the work is based on standards that guarantee the data protection of the patients and the research and labor staff.

This unit is in permanent coordination with the Data Protection Delegation of the Generalitat Valenciana, which also covers the Clínico-Malvarrosa Health Department, and ensures that the Integra-Cloud project complies with the GDPR Regulation.

How is the Data Protection regulation applied?

The regulation includes many aspects that must be complied with by all entities that process personal data. One of the pillars of this regulation is article 5 of the GDPR, which defines the principles that any processing of personal data must comply with: lawfulness, fairness and transparency, purpose limitation, data minimisation, accuracy, storage limitation and integrity and confidentiality.

  • 01
    Lawfulness, fairness and transparency
    Integra Cloud involves a processing of data integrated in the public systems of the Generalitat Valenciana. The legal basis is received from the legal obligations or public interests of each of them. As a whole, Integra Cloud aims to support the performance of the functions entrusted to the Department of Health Clínico-Malvarrosa by providing it with new knowledge from the joint analysis of the data that it already has integrated in its information systems.

    Its secondary purpose, to promote scientific research carried out in the Department of Health, is necessary to comply with the research function that the General Health Law and the Biomedical Research Law assign to it, as part of the public health system.

    As for compliance with the principle of transparency, the Integra Cloud project has information channels open to its different stakeholders, as well as to the general public, to provide constant information on its characteristics, progress and results. In addition, from its design it has incorporated the principles and policies of open science.
  • 02
    Purpose limitation
    The data that Integra Cloud includes have been collected for the purpose of providing public services to citizens. The data processing of the project will maintain this purpose and provide new possibilities for improvement to the public service by facilitating real-time information, which is very useful for decision making.

    Additionally and with adequate guarantees, the data could be used for scientific research, which is a purpose declared as compatible by the European data protection regulation.
  • 03
    Data minimization
    The Integra Cloud project enables knowledge inference from the data set of different health sources, so this principle is met by determining that the selection of the data collected are only adequate, relevant and limited to the objectives set.
  • 04
    Accuracy
    The technology developed by the Integra Cloud project aims at the automatic and real-time integration of the data collected in computer systems of the public system of the Comunitat Valenciana, so that the data are as reliable and accurate as in the source systems.
  • 05
    Limitation of the retention period
    The Integra Cloud project is developed under the regulations for the use of public information, so that the retention period of the information it processes will have a period equivalent to that of the computer systems from which it receives data. As for its approach to scientific research, the applicable regulations allow this information to be kept for an even longer period, as long as adequate guarantees are maintained.
  • 06
    Integrity and confidentiality
    The confidentiality and security of data is a priority in the Integra Cloud project. For this reason, it stores the information in secure servers, within a network environment that is permanently monitored and secured by the INCLIVA computer team, in coordination with the technology and information security teams of the Generalitat Valenciana.

    The next certification of the National Security Scheme in INCLIVA and in the Clínico-Malvarrosa Health Department will complete the demanding security framework required by this type of data.