The German CHIP Registry meets all data protection and technical requirements for the management of sensitive patient data. The General Data Protection Regulation (GDPR) is the basis for the secure collection and management of pseudonymized data. The sole data sovereignty lies with the patient.

All health data is managed pseudonymously on secure servers in Germany. The risk analysis for data security certifies that the German CHIP Registry has a low security risk. This corresponds to the security level for protecting health insurance data or online banking.