Legal Obligation
Data processing purposes
The hospital will only share information if there is a genuine need for it as the law strictly controls the sharing of personal information and we will normally ask for your consent to share for non-care purposes.
- Prevent Duty
Sometimes however the law requires us to pass on information without your consent:
- To notify of a death
- To inform the police if a serious criminal offence has been committed
- By court order
- Where there is a risk of harm or abuse to you or other people
Information may be shared with
- Coroner’s Office
- The police
- The courts
- Local authorities
Lawful basis
- GDPR Article 6(1)(c): Processing is necessary for compliance with a legal obligation to which the controller is subject
- GDPR Article 9(2)(b): processing is necessary for the purposes of carrying out the obligations and exercising specific rights of the controller or of the data subject in the field of employment and social security and social protection law.