Hacker News new | ask | show | jobs
by Silhouette 1849 days ago
Article 6 is not the one that really matters here, because we're talking about health-related personal data, which is one of the special categories. Article 9 is the main one dealing with those and it imposes significantly stronger requirements. In particular, the various conditions under which it may be legal to process that data under Article 9 make repeated references to requirements for safeguards and professional secrecy. They still don't seem to outright prohibit general data lakes and opt-out arrangements, though.