Duty LXD-6791
Handles health records, in Madagascar
Law No. 2014-038, sensitive personal datasince 3 lines
Loi n° 2014-038, arts. 18-19 (données sensibles) · Read the law's page
- Do not process sensitive data, including racial origin, biometric, genetic, political opinion, religious or other belief, trade union, health, or sex-life data, unless one of the law's listed exceptions applies, such as the data subject's express consent.
- Where an exception permits sensitive data to be processed, put in place the safeguards the law or the CMIL requires for that exception.
- Restrict processing personal data about offenses, convictions, or safety measures to a court, a public authority managing a public service acting within its legal powers, or a legal auxiliary acting within the strict needs of a legally assigned mission.
Decree No. 2023-1541, sensitive personal datain force4 lines
Décret n° 2023-1541, arts. 59-61 (données sensibles) · Read the law's page
- Do not process sensitive data (racial origin, biometric, genetic, political opinion, religious or other belief, trade union, health or sex-life data) except in a case article 18 of Law No. 2014-038 permits.
- Keep sensitive data adequate, relevant and limited to what the purposes of the processing require.
- Reinforce the security of sensitive-data processing through pseudonymization or encryption.
- Before processing sensitive data, ask the CMIL for authorization, stating the public interest pursued, the type of sensitive data and the person concerned, and do not begin until the CMIL notifies its authorization.