A health clinic processes genetic data for diagnosis. Beyond identifying an Article 6 lawful basis, what additional GDPR condition is typically required?
Select an answer to reveal the explanation.
Short Explanation
Genetic data for diagnosis sit in the special-category bucket—Article 6 alone is not the whole ticket. You still need an Article 9 condition (for example health care / medical diagnosis pathways where they fit) on top of a lawful basis. Think of it as two locks on the same door.
Full Explanation
Genetic data are special categories of personal data under Article 9. Processing is prohibited unless an Article 9(2) exception or condition applies (such as provisions related to health care and medical diagnosis under appropriate safeguards), and controllers must also have an Article 6 lawful basis. Relying on Article 6 alone is insufficient for special-category processing of identifiable genetic data for diagnosis.