Personal data relating to the health of an individual, including the provision of health care services, which reveals information about the individual’s health (physical or mental) status.
Includes the purpose of preventative or occupational medicine, the assessment of the working capacity of an employee or worker, medical diagnosis, the provision of medical, health or social care or treatment, or the management of medical, health or social care systems and services.
Processing of personal data is deemed to be likely to pose a high risk to the significant interests of data subjects where it involves –
Any processing of personal data that is likely to pose a high risk to the significant interests of data subjects. This should be determined by considering the nature, scope, context and purpose of the processing as well as the technology, mechanism or procedure used to process the data in question.
Processing of personal data will be considered as posing a high risk where it involves –