# Data Protection Act 2018, Paragraph 3


This condition is met if the processing—
(a) is necessary for reasons of public interest in the area of public health, and
(b) is carried out—
(i) by or under the responsibility of a health professional, or
(ii) by another person who in the circumstances owes a duty of confidentiality under an enactment or rule of law.

---
Source: https://www.legislation.gov.uk/ukpga/2018/12/schedule/1/paragraph/3 (the official version)
Page: https://openlegislation.uk/data-protection-act-2018/schedule-1/paragraph-3
Contains public sector information licensed under the Open Government Licence v3.0. Source: legislation.gov.uk, The National Archives.