CIPP/E: Certified Information Privacy Professional/Europe

Data concerning health is special-category personal data. The GDPR provides specific exceptions for processing necessary for legal claims, vital interests, health care, and public-health purposes, each subject to its applicable conditions and safeguards. Processing for journalistic purposes instead depends on Member State rules that reconcile data protection with freedom of expression; a journalist’s personal belief that publication serves the public interest does not by itself authorize processing sensitive medical data without the data subject’s knowledge or consent.