Blue-Cloud D7.2 POPD - Requirement No. 3

Following the Ethics Summary Report received during the evaluation of the Blue-Cloud proposal, some requirements related to ethical aspects in the project were identified.

This deliverable is related to the Ethics Requirements that the Blue-Cloud project must comply with, described in WP7 Ethics Requirements included in the Grant Agreement (GA) by the Agency as Part of Work Package No. 7 "Ethics Requirements"1 and responding to the ethical issues identified for the Project.

The Blue-Cloud project counts on the collection and processing of personal data, especially concerning the activities related to the Blue-Cloud website (blue-cloud.org) and Gateway (blue-cloud.d4science.org).

In particular, the contact details of the Data Protection Officers (DPOs) of the project beneficiaries have been made available to all data subjects involved in the project. For those beneficiaries not required to identify a DPO under the General Data Protection Regulation (GDPR)2, a letter of confirmation that a detailed data protection policy for the project will be kept on file and submitted

to the Agency upon request.

Together with D7.1 H – POPD Requirement No. 2, which deals with the type and purposes of the data to be collected, the deliverable confirms that the collected data is relevant and limited to the scope of the Project.

A description of the technical and organisational measures that will be implemented to safeguard the rights and freedoms of the data subjects/research participants is also provided, along with a description of the security measures that will be implemented to prevent unauthorised access to personal data (in particular video recording) or the equipment used for processing.

In general, it is not foreseen that the beneficiaries transfer the data collected to the purposes of the Project outside the EU; however, should such a situation occur at any point during the subsequent evolution of the Project, measures will be put in place to ensure that these transfers meet the requirements of Chapter V of the GDPR 2016/679.