Health data may be processed only with consent, where law or regulation provides, for public health protection and disease research, where beneficial or necessary to follow the person's health, or for health research; only doctors or persons bound by professional secrecy may process it, and doctors may communicate it to persons or establishments only with INPDP authorisation (decided within a month, possibly with conditions or a ban on dissemination); processing may not last longer than its purpose requires. Breach of the practitioner condition is an offence.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.