October - Article
Healthcare Consent Has to Answer Four Questions — Not Just "Yes" or "No" In healthcare, consent cannot be treated as a simple checkbox that answers whether a hospital may process a patient's data. A meaningful consent management system must answer a much more important question: what happens when consent expires or is withdrawn? The answer is not always deletion. In fact, depending on the nature of the processing, the organisation may need to continue processing, stop a particular activity, restrict access, or ultimately erase the data. The first possibility is continued processing . Consent expiry does not necessarily mean that every form of processing must immediately stop if there is another valid legal basis or a statutory obligation permitting or requiring the processing. Healthcare is a good example. A patient may withdraw consent for a particular optional activity, while the hospital may still be required to retain or proce...