Member

We would also welcome clarity and reassurance that there is no scope for the new recognised legitimate interest avenue to apply to the processing of identifiable health data held by non-public bodies, such as research organisations or any controller of health data. In our view and that of the BMA, it would represent a dilution of the protections for health data should it be deemed that data controllers no longer need to justify why they are processing data.