The Regulation covers the use of personal data across a wide range of sectors and will affect how patient data are used in research. The original proposals set out a mechanism for protecting privacy, while enabling research and included a requirement for specific and explicit consent for the use and storage of personal data, while providing an exemption for research, subject to strong ethical and governance safeguards.