Romania Law No. 190/2018 on Data Protection Measures (GDPR Implementation) 3-2: Health data processed for public health may not be reused by third parties

Health data processed to ensure public health (as defined in Regulation (EC) No 1338/2008) and health and safety at work may not subsequently be processed by third parties for other purposes.

Maintained by Gerard BlokdykVerified against the published standard 31 May 2026Control text last updated 21 May 2026

Other controls in Chapter II: Special rules for certain categories of data (arts 3 to 6) – Romania Law No. 190/2018 on Data Protection Measures (GDPR Implementation)

3-1 Genetic, biometric and health data in automated decisions or profiling: explicit consent or express law with safeguards
4-1 National identification numbers only on a GDPR article 6(1) basis
4-2 National identification numbers under legitimate interest: four mandatory safeguards
5 Employee monitoring by electronic communications or video: five cumulative conditions and 30-day storage
6 Public-interest processing: safeguards for personal and special category data

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All Romania Law No. 190/2018 on Data Protection Measures (GDPR Implementation) controls