Handles health records, in Saint Lucia

Act 11 of 2011, ss. 35-38 (sensitive personal data) · Read the law's page

• Do not process a special category of sensitive personal data (racial or ethnic origin, political opinion, religious belief, physical or mental health, sexual orientation, or criminal or financial record) unless a listed ground applies, the person has given explicit consent, or the person already published it themselves.
• Where you rely on the vital-interests or right-or-obligation grounds to process sensitive personal data without consent, put appropriate safeguards in place first.
• Process sensitive personal data for health or medical purposes only through a health practitioner or someone bound by professional confidentiality, and only for preventive medicine, public health, medical diagnosis, medical research, or managing health and hospital care services.
• Before processing or disclosing sensitive personal data for research or statistical purposes, confirm identifiable data is genuinely necessary, commit not to use it to recruit research participants, get the responsible officer's approval of security and destruction conditions, and get the recipient's signed agreement to comply with them.