View source for Article 9 GDPR

===== Health data =====
[[Article 4 GDPR|Article 4(15) GDPR]] defines health data as any personal data related to the physical or mental health of a natural person, including the provision of health care services, which reveal information about his or her health status. In this way, for example, the Austrian DPA has held that negative PCR (SARS_CoV-2) tests should be classified as health data.<ref>Datenschutzbehörde, DSB-2021-0.101.211, 15 February 2021, (available [https://www.ris.bka.gv.at/Dokument.wxe?ResultFunctionToken=096d50fd-d36d-4a43-bb00-5ff38c3b6f4d&Position=1&Abfrage=Dsk&Entscheidungsart=Undefined&Organ=Undefined&SucheNachRechtssatz=True&SucheNachText=True&GZ=&VonDatum=01.01.1990&BisDatum=&Norm=&ImRisSeitVonDatum=&ImRisSeitBisDatum=&ImRisSeit=Undefined&ResultPageSize=100&Suchworte=&Dokumentnummer=DSBT_20210215_2021_0_101_211_00 here]).</ref> This category may also include data on special needs of students which qualify as health data too.<ref>Datatilsynet, 20/02191-1 KBK/-, 2 July 2020 (available [https://www.datatilsynet.no/contentassets/9d5792264c884f3a903d3981c38812ac/~-20_02191-1-vedtak-om-overtredelsesgebyr---ralingen-kommune-202444_10_1.pdf here]). </ref><blockquote><u>EDPB Guidelines:</u> on this provision there are [https://edpb.europa.eu/our-work-tools/our-documents/guidelines/guidelines-032020-processing-data-concerning-health-purpose_en EDPB Guidelines 03/2020 on the processing of data concerning health for the purpose of scientific research in the context of the COVID-19 outbreak]</blockquote>