Schedule 10, paragraph 8(1)
DPA 2018
Data Protection Act 2018 · United Kingdom
The processing is necessary for medical purposes and is undertaken by— a health professional, or a person who in the circumstances owes a duty of confidentiality which is equivalent to that which would arise if that person were a health professional.
← 8 · All articles · 2 →
Source: legislation.gov.uk · retrieved 2026-09-04