Data Protection Act

46. Personal data relating to health

Edition: 2022-12-31 · In force

(1)Personal data relating to the health of a data subject may only be processed—

(a)by or under the responsibility of a health care provider; or

(b)by a person subject to the obligation of professional secrecy under any law.

(2)The condition under subsection (1) is met if the processing—

(a)is necessary for reasons of public interest in the area of public health; or

(b)is carried out by another person who in the circumstances owes a duty of confidentiality under any law.