Public health is recognised as a public interest in the GDPR [Tile P.19].

According to Art. Art. 9 II h and 9 II i GDPR, the following processing purposes are also specifically mentioned, which, however, still have to find their way into special legal bases of Union law or Member State law or have to be part of a contract with a health professional:

- preventive or occupational medicine

- assessment of the working capacity of the employee

- medical diagnosis

- provision of health or social care or treatment or the management of health or social care systems and services

- public interest in the area of public health

- protecting against serious cross-border threats to health

- ensuring high standards of quality and safety of health care and of medicinal products or medical devices.

With Art. 35 CFR it is also the primary law that establishes:

"Everyone has the right of access to preventive health care and the right to benefit from medical treatment under the conditions established by national laws and practices. A high level of human health protection shall be ensured in the definition and implementation of all Union policies and activities."