Handles health records, in Zambia

Data Protection Act, 2021, ss. 14 and 17 (sensitive personal data, children and vulnerable persons) · Read the law's page

• Obtain explicit consent, or rely on another applicable ground, before processing sensitive personal data, including biometric or genetic data, a child's data, political opinions, or health information.
• Process a child's or a vulnerable person's personal data only with the consent of their parent, legal guardian or a person exercising parental responsibility.
• Make every reasonable effort to verify that consent for a child's or a vulnerable person's personal data was given or authorised by that person, taking available technology into account.
• Build appropriate age-verification and parental-consent mechanisms into any processing of a child's personal data.
• Where you rely on the public-interest ground for sensitive personal data, put adequate measures in place first to safeguard the data subject's rights and freedoms, and where you rely on the medical ground, process only by or under the responsibility of a professional bound to secrecy.