(159) If personal data are processed for the purposes of scientific research, this Regulation should also apply to such processing. In this Regulation, the processing of personal data for the purposes of scientific research should be interpreted broadly to include, for example, technological development and demonstration, basic research, applied research, and privately funded research. In addition, account should be taken of the Union's objective under Article 179(1) TFEU, which is the creation of a European Research Area. The expression "for the purposes of scientific research" should also include research conducted in the public interest in the field of public health. Given the specificity of the processing of personal data for the purposes of scientific research, special conditions should apply, in particular with regard to the publication or other disclosure of personal data in the context of the purposes of scientific research. If the outcome of scientific research, particularly in a health context, justifies further measures in the interest of the data subject, the general provisions of this Regulation should apply to those measures.
„In a small company, investing in security is a waste of money."
Are you sure about that?

