Report From The Spanish Data Protection Agency On Data Processing In Relation To The Coronavirus

Given the emergency health situation derived from the spread of the Covid-19 virus, the Spanish Data Protection Agency has published a report on the processing of health data.

The General Data Protection Regulation allows the processing of personal health data in specific cases. Thus, the legislation indicates that the processing of personal data in exceptional situation, such as the control of epidemics and their spread, a mission carried out in the public interest or the vital interests of the interested party or other individuals, is lawful.

Consequently, in situations such as the one we are in, a general health emergency due to the Covid-19 pandemic, the processing of health data is allowed without requiring the consent of those affected.