30 “Data assets" include all data and information collected and retained by WHO.
40 “Personal data" is any information relating to an individual who is or can be identified from that information. Personal data include biographical data (biodata) such as name, sex, civil status, date and place of birth, country of origin, country of residence, individual registration number, occupation, religion and ethnicity, biometric data such as a photograph, fingerprint, facial or iris image, as well as any expression of opinion about the individual, such as assessments of the status and/or specific needs. Personal data also include data that, when combined with other data, can indirectly identify an individual.
50 “Sensitive personal data" are personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, as well as genetic or biometric data uniquely identifying a natural person, health data or personal data relating to a person's sex life or sexual orientation.
60 “Health data" are sensitive personal data related to the physical or mental health of a natural person, including the provision of health care services, which reveal information about his or her current or past health status. Such data include personal data derived from the testing or examination of a human body part or bodily substance, including from genetic data and biological samples.
70 “Geospatial data" include information on the place of residence of patients, the location of disease outbreaks, treatment and deaths, health facilities, landmarks, population movements and border crossings. Geospatial data provide valuable insights into the spread of communicable diseases, the impact of environmental changes on health and accessibility to health care.
80 “Anonymization" is the process by which data variables that can identify an individual are removed from a data set. Such variables may be direct or indirect identifiers. Direct identifiers enable a person to be immediately identified (such as his or her name, address, photograph or medical record number). Indirect identifiers can be linked with other available information to identify a person (such as a higher level of address, disease condition, gender, generic job title or date of birth).
90 “De-identification" is the process by which direct and indirect identifiers are masked or replaced by a code that has a key. Applying the key can reinsert the identifiers to enable identification. As such, access to the key is restricted and its use is permitted only in certain circumstances.
100 “Pseudonymization" is the process by which direct identifiers are eliminated or transformed, but indirect identifiers remain intact.
