Because of the type of data, to be fully compliant with GDPR a licence must be signed before downloading the dataset. Some relevant licensing conditions are:
1. The data requester may not use the requested dataset for any unlawful purpose or for purposes not set in the approved research project or otherwise not authorized the data provider.
2. The data requester can't, directly or indirectly, sell, license or sub-license, rent or otherwise transfer to third parties the dataset provided, nor permit any third party to do so.
3. The data requester undertakes not to use any de-anonimisation technique and not to link the downloaded data to other datasets, including public ones, and declares that it is aware that any attempt at de-anonimisation could constitute an unlawful processing of personal data, entail the applicability of EU Regulation 2016/679 and expose also, but non only, to administrative fines.