VGS corporate lawyers
London

+44 2039665531

Milan

+39 0250043613

  • Home
  • Who we are
  • Practice Areas
    • Company law
      • Setting up a company in Italy
      • Corporate governance
      • Bankruptcy
    • Debt Recovery & Credit Collection
    • Arbitration and Mediation
    • Contracts
      • Acquisition Finance
    • White collar crimes
    • Data protection and GDPR
    • Professional Negligence
      • Medical Malpractice
  • People
    • Avv. Valentina Giarrusso
    • Avv. Flavia Di Pilla
    • Avv. Silvia Pellegrini
    • Avv. Giuseppe Ganci
    • Avv. Valentina Improta
    • Dr. Fabrizio Di Patti
    • Avv. Salvatore Fasciana
    • Dr. Yasine Ajlane
  • News & Blog

Consent to Data Processing in Healthcare

  • by VGS' Editorial Board
  • 29 March 2019
  • Comments (0)

The compliance with the GDPR produced amendments to the Italian Data Protection Code, also with reference to healthcare rules.

Article 75 of the Italian Data Protection Code now states that consent for the processing of data for diagnosis and treatment purposes is no longer required.       
 Indeed, data processing must now comply with the articles of the GDPR.

Article 9 of the GDPR generally provides that the data processing is prohibited except in the listed cases, such as processing for purposes of health treatment, diagnosis, healthcare and other medicine related activities.

The Italian Data Protection Code, therefore, has been adjusted by providing a simplified procedure regarding the mandatory information to be provided to the data subject. The doctor has only to inform the patient about the processing of personal data in a clear and precise form, whether it is a public or private medical facility.

Therefore, it will not be necessary anymore to obtain the explicit consent of the data subject. The Italian Data Protection Authority has recently clarified that the treatments for diagnosis and recovery purposes are carried out by health professionals, who are in any case subject to the obligation to keep confidentiality; hence, the GDPR adjustment in terms of simplification appear logical and adequate.

Furthermore, the Authority warns that the treatments that do not require consent are only those qualified as necessary and essential to the pursuit of specific medical actions; hence, all ancillary treatments related to the medication and not strictly necessary will always require the explicit consent of the data subject.

  • GDPR
  • Italian Privacy
  • Share:
Previous Article: The Directive on Copyright in the Digital Single Market
Next Article The Franchise Agreement under Italian Law

Practice Areas

  • Company law
    • Bankruptcy
  • Debt Recovery & Credit Collection
  • Arbitration and Mediation
  • Contracts
    • Acquisition Finance
  • White collar crimes
  • Data protection and GDPR
  • Professional Negligence
    • Medical Malpractice

Free Consultation

    Tags

    ADR Airbnb Arbitration Auditing Brexit Company Law Company Shares Consent Contracts Cookies Copyright Coronavirus Data DataProcessing Data Protection DPO European Union Eviction Free Title GDPR HealtData HouseHold Agreements Italian Bankruptcy Law Italian Business Italian Company Law Italian Corporate Law Italian Criminal Law Italian Debt Recovery Italian Entry Visa Italian Incorporation Italian Intellectual Property Law Italian Legal Advice Italian Privacy Italian Tax Legal guide MedialTreatment Mediation Partnership Patient Personal Data Privacy Processing Research Warranty White Collar Crimes

    Social Links

    • Facebook
    • Instagram
    • LinkedIn

    See also:

    VGS Lawyers

    VGS - Family Lawyers

    © Copyright 2022 | VGS Corporate Lawyers | All right reserved.