Data Protection Act 面试题与答案

Question: Under what circumstances can organizations process sensitive personal data?

Answer: Organizations can process sensitive personal data if explicit consent is obtained, processing is necessary for legal claims, for reasons of substantial public interest, or for medical purposes, among other specific conditions outlined in the Data Protection Act.

Example:

A healthcare provider processing patient medical records for treatment purposes.