Hematoscope Lab

Statement on Fulfillment of Articles 13 and 14 GDPR Information Obligations

The Hematoscope Lab is a research team affiliated with HUS Helsinki University Hospital (HUS-group). HUS-group is the controller of the study and data permits the Hematoscope Lab is using for research work. HUS-group fulfills its information obligations towards data subjects pursuant to Articles 13 and 14 of the General Data Protection Regulation (GDPR) through the following framework:

  1. Privacy policies (Articles 13 & 14 GDPR):
    • As the Data Controller, HUS-group maintains official, statutory privacy notices (tietosuojaselosteet) covering patient registers and scientific research datasets, accessible via the official HUS website.
    • For project-specific details and research objectives, please contact the group leader Oscar Brück.

  2. Direct collection (Article 13 GDPR): Where personal data or clinical samples are gathered directly from data subjects, patients receive written Patient Information Sheets (potilastiedote) and consent forms managed under HUS controller governance prior to sample or data collection.

  3. Secondary use & large datasets (Article 14 GDPR): Where secondary, retrospective, or biobank clinical data and digital images are accessed:
    • Article 14(5)(b) exemption: Direct individual notification is exempt under Article 14(5)(b) GDPR, as providing individual notices to large cohorts of retrospective, pseudonymized data subjects is impossible or involves a disproportionate effort.
    • Public transparency safeguards: In accordance with Article 14(5)(b) GDPR and national Finnish legislation on the secondary use of health data (Toisiolaki), HUS ensures public transparency by making information on research registries and data processing activities publicly available online.
  4. Data protection and institutional governance: All processing strictly adheres to HUS organizational data protection policies. Data subjects retain statutory rights (access, rectification, restriction, objection) and may contact HUS Data Protection Officer (tietosuojavastaava) for inquiries or complaints.