OpenLegislation

Paragraph 6 I1

Changes not yet applied. Later legislation changes this provision in ways not yet written into the text below:

(1)

Article 15(1) to (3) of the F1UK GDPR (confirmation of processing, access to data and safeguards for third country transfers) do not permit the disclosure of data concerning health by a controller who is not a health professional unless the controller has obtained an opinion from the person who appears to the controller to be the appropriate health professional to the effect that the serious harm test is not met with respect to the data.

(2)

Sub-paragraph (1) does not apply to the extent that the controller is satisfied that the data concerning health has already been seen by, or is within the knowledge of, the data subject.

(3)

An opinion does not count for the purposes of sub-paragraph (1) if—

(a)

it was obtained before the beginning of the relevant period, or

(b)

it was obtained during that period but it is reasonable in all the circumstances to re-consult the appropriate health professional.

(4)

In this paragraph, “the relevant period” means the period of 6 months ending with the day on which the opinion would be relied on.

Annotations

Textual amendments

F1

Words in Sch. 3 para. 6(1) substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 93(9) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)

Commencement

I1

Sch. 3 para. 6 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(b)

Notes on Schedule 3

Textual amendments

F1

Words in Sch. 3 heading substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 93(2) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)

Notes on Restriction of Article 15 of the UK GDPR: prior opinion of appropriate health professional

Textual amendments

F1

Words in Sch. 3 para. 6 cross-heading substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 93(8) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)