The PREVENT project aims to address childhood obesity and related health risks. To do so, it collects sensitive personal data from children across three Living Labs based in Catalonia (Spain), Greece, and Sweden. Given the nature of this data and the age of the participants, privacy and data protection are critical concerns. The challenge lies in balancing innovation in public health with the need to safeguard children’s rights and privacy.

Timelex

To manage this balance, PREVENT includes Timelex, a law firm specialising in technology, data protection and privacy law, as its legal partner in the consortium. Timelex is responsible for overseeing the legal aspects of the pilot activities. Its role is to ensure that all personal data collected throughout the project is handled in full compliance with applicable legislation and ethical standards. Legal safeguards are in place to guarantee safe, lawful and responsible data processing.

Data collection in the schools

Each pilot is carried out in schools and focuses on promoting healthier lifestyles among children and adolescents by improving diet, increasing physical activity and preventing obesity. Digital tools are used to monitor behaviours and measure progress. Students, teachers and parents play an active role in shaping the content and delivery of the programmes to ensure the solutions are relevant, realistic and adapted to each community’s needs.

Data protection measures

In response to the sensitive nature and scale of data collection, PREVENT has implemented several key safeguards:

  • A Data Protection Impact Assessments (DPIA) has been conducted for each pilot to assess potential risks and identify appropriate mitigation strategies. This step is essential when working with large volumes of children’s data and emerging technologies.
  • Consent forms and privacy notices have been prepared in line with local legal requirements to ensure that participants are fully informed and agree to the use of their data.
  • As data responsibility is shared among multiple partners, a joint controllers agreement has been put in place to define the roles and obligations of each party in a transparent manner.

These measures reflect PREVENT’s strong commitment to legal compliance and ethical responsibility. By embedding privacy and data protection principles into every phase of the project, PREVENT ensures that children’s rights remain protected while advancing innovative approaches to improve public health.