Law No. 09-08 on the Protection of Individuals with Regard to the Processing of Personal Data D-31 to 33: Decree Articles 31 to 33: anonymise or code data before communicating it for research, and publish results without identification

What does D-31 to 33 require?

Where a controller communicates personal data to a third party for further processing for historical, statistical or scientific purposes, the data must first be made anonymous or coded by the controller or a competent body; results of such processing may be published in identifiable form only with the person's express consent or where limited to data the person manifestly made public. The CNDP decides whether data is of a historical, statistical or scientific character.