Handles health records, in Antigua and Barbuda

Data Protection Act, 2013, s. 18 (sensitive personal data) · Read the law's page

• Do not process sensitive personal data, meaning information about a data subject's physical or mental health, sexual orientation, political opinions, religious or similar beliefs, or the commission or alleged commission of an offence, unless the data subject has given explicit consent to the processing.
• Where consent is not obtained, process sensitive personal data only on a listed ground such as an employment law obligation, protecting the vital interests of the data subject or another person, medical treatment by a healthcare professional, legal proceedings or advice, the administration of justice, or exercising a function conferred by law.
• You may also process sensitive personal data that the data subject has already made public through their own deliberate action.