Articles 43, 44 and 65 with Decree Articles 35 and 36: health data may be processed only with consent, when manifestly made public, for vital interests, for a purpose set by law, for public health including screening, to prevent a concrete danger or punish a specific offence, for legal claims, or for preventive medicine, diagnosis or care under a health professional bound by secrecy; they are collected from the person unless necessary otherwise or the person cannot provide them; patients (or, after death, close family) exercise access through a physician they designate; research participants are informed by a document unless the treating physician legitimately withholds a serious diagnosis.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.