Spain’s data protection authority, the Agencia Española de Protección de Datos, addressed how individuals’ vital interest should be interpreted under the EU General Data Protection Regulation. The AEPD outlined circumstances where processing personal data without consent may be necessary to an individual’s well being, including the processing of health information during medical emergencies if it is in the best interest of the patient.
Full story