Glossary · Regulation
GDPR Article 9
Processing of special categories of personal data
Article 9 of the GDPR prohibits processing health data unless one of its exceptions applies, most commonly explicit consent (9(2)(a)), provision of care (9(2)(h)) or public-interest research (9(2)(j)).
A health app therefore needs an Article 9 basis in addition to the Article 6 basis, and a DPIA is almost always required.
Official source
See also
Explained in depth
Definitions written by Anpheros from the official sources linked on each page. General information about standards and regulation, not legal or medical advice. All terms →