Under the GDPR, who would be LEAST likely to be allowed to engage in the collection, use, and disclosure of a data subject’s sensitive medical information without the data subject’s knowledge or consent?

Under the GDPR, who would be LEAST likely to be allowed to engage in the collection, use, and disclosure of a data subject’s sensitive medical information without the data subject’s knowledge or consent?
A . A member of the judiciary involved in adjudicating a legal dispute involving the data subject and concerning the health of the data subject.
B . A public authority responsible for public health, where the sharing of such information is considered necessary for the protection of the general populace.
C . A health professional involved in the medical care for the data subject, where the data subject’s life hinges on the timely dissemination of such information.
D . A journalist writing an article relating to the medical condition in question, who believes that the publication of such information is in the public interest.

View Answer

Answer: D

Explanation:

Reference: https://www.eui.eu/Documents/ServicesAdmin/DeanOfStudies/ResearchEthics/Guide-Data­Protection-Research.pdf