Can I process health data and employment data without consent? #GDPR

Yes. Health data may be processed by a pharmacy on the basis, for example, that it is necessary for the performance of a task carried out in the public interest (Article 6, 1(e)); or processing is necessary for compliance with a legal obligation (the Terms of Service in the NHS Scotland Pharmaceutical Services Regulations) (Article 6(c)). There will also be many occasions when health data in a pharmacy is processed to protect the vital interests of the patient (Article 6(d)). As health data is a special category of personal data, the second stage of lawful processing must also be considered.

 Employment data may be processed lawfully under one or more of the broad categories in Article 6, for example, as necessary for the performance of a contract and, for tax and national insurance purpose, for compliance with a legal obligation.

View our GDPR page for more information