The European Medicines Agency (EMA) published a data protection notice on 5 May 2026, detailing how it processes personal data of trainees, applicants, and others involved in its traineeship programme, in compliance with the EU's General Data Protection Regulation (GDPR). The notice applies to the selection, administration, and evaluation of traineeships, impacting individuals' privacy rights and the agency's operational efficiency.
The document, titled 'European Medicines Agency’s data protection notice for the management of traineeships at EMA', specifies the types of personal data collected, including contact details, educational background, and professional experience. It also outlines the purposes of processing and informs data subjects of their rights, such as access, rectification, and erasure. The notice is a mandatory transparency measure under GDPR.
Policy orientations and trade-offs
The notice balances EMA's operational need to process personal data for efficient traineeship management against individuals' privacy rights. It sets clear retention periods and limits data sharing to authorised EMA staff and external evaluators, prioritising data minimisation and purpose limitation. This reduces risks of unauthorised use but may increase the administrative burden on EMA's data protection officer and HR department.
Impact on stakeholders
Trainees and applicants benefit from enhanced transparency and control over their personal data, with clear procedures to exercise GDPR rights. EMA staff involved in traineeship management must adhere to stricter data handling protocols, potentially increasing workload. External evaluators, such as academic experts, are bound by data processing agreements, limiting their use of candidate data. EU taxpayers may indirectly fund compliance costs, though these are likely negligible compared to the agency's overall budget.
Expected institutional follow-up
The notice is effective immediately and will be reviewed periodically to align with changes in EU data protection law or EMA's traineeship policies. No further regulatory action is required, as the notice is a self-standing transparency document. EMA may issue updates if processing practices evolve.