# Data Protection Act 2018, Paragraph 2


(1) This condition is met if the processing is necessary for health or social care purposes.
(2) In this paragraph “health or social care purposes” means the purposes of—
(a) preventive or occupational medicine,
(b) the assessment of the working capacity of an employee,
(c) medical diagnosis,
(d) the provision of health care or treatment,
(e) the provision of social care, or
(f) the management of health care systems or services or social care systems or services.
(3) See also the conditions and safeguards in Article 9(3) of the UK GDPR (obligations of secrecy) and section 11(1).

---
Source: https://www.legislation.gov.uk/ukpga/2018/12/schedule/1/paragraph/2 (the official version)
Page: https://openlegislation.uk/data-protection-act-2018/schedule-1/paragraph-2
Contains public sector information licensed under the Open Government Licence v3.0. Source: legislation.gov.uk, The National Archives.