Health Data
What is Health Data?
Personal data related to the physical or mental health of a natural person, including the provision of health care services. Health data is treated as special category data under GDPR and regulated by HIPAA in the United States.
Terms that appear alongside health data
Each of these is named in at least one of the same controls as health data. The number is how many controls name both.
- consent 43 shared controls
- gdpr 33 shared controls
- biometric data 26 shared controls
- genetic data 20 shared controls
- data subject 17 shared controls
- sensitive personal data 15 shared controls
- data protection 13 shared controls
- profiling 11 shared controls
Frameworks that govern health data
What the standards actually require on health data
Requirements naming health data across 6 standards, quoted from the control text.
Article 18: providers receiving data under Chapter II are not required to compensate the provider making it available, and no healthcare provider or third party may directly or indirectly charge data subjects a fee or costs or require compensation for sharing...
regulation-on-the-european-health-data-space-ehds::18 · Never charge patients or receiving providers for making or sharing health data →Sale of Consumer Health Data is prohibited without a written, statute-compliant Valid Authorization that includes specific data, recipient, purpose, expiration not exceeding one year, and consumer right to revoke.
MHMD-SAL.1 · Valid authorization to sell Consumer Health Data →Where health data are processed under art. 30(1), (2) or (3), only persons bound to secrecy by office, profession, statutory provision or a confidentiality agreement may process them.
netherlands-gdpr-implementation-act-uavg-uitvoeringswet-avg-2018::30(4) · Art. 30(4) Ensure health data are processed only by persons bound to confidentiality →Health data held by institutions of the national health system may be processed by public and private natural and legal persons for scientific research only if anonymised or, as the case may be, if the Authority authorises it after a report from the national h...
ley-org-nica-de-protecci-n-de-datos-personales-lopdp::32 · Art. 32: health data for scientific research →A person must not sell, or offer to sell, consumer health data, including gender-affirming and reproductive or sexual health data, without first obtaining the consumer's consent.
vermont-data-privacy-and-online-surveillance-act::2415k-4 · 9 V.S.A. § 2415k(4) No sale of consumer health data without consent →Genetic, biometric and health data may not be disseminated (made available to undetermined parties, including by publication).
italy-personal-data-protection-code-legislative-decree-no-196-2003-amended-2018::Art. 2-septies(8) · Art. 2-septies(8) Never disseminate genetic, biometric or health data →Questions people ask about health data
What is Health Data?
Why is Health Data important for compliance?
Which compliance frameworks address Health Data?
Where can I learn more about Health Data?
See how Health Data applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.