- The processing of data concerning health, so called sensitive data, is prohibited. It only may be processed if the registered person has given his/her explicit consent to processing or in a clear manner publicised the information.
- Sensitive personal data may be processed for health and hospital care purposes, provided the processing is necessary for
a) preventive medicine and health care,
b) medical diagnosis,
c) health care or treatment, or
d) management of health and hospital care services.
A person who is professionally operational within the health care sector and is subject to a duty of confidentiality may also process sensitive personal data that is subject to the duty of confidentiality. This also applies to the person who is subject to a similar duty of confidentiality and who has received sensitive personal data from the operation within the health care sector.
- The supervisory authority of the data is entitled for its supervision to obtain on request
a) access to the personal data that is processed,
b) information about and documentation of the processing of personal data and security of this processing, and
c) access to those premises linked to the processing of personal data.
Top |
