(1) Sensitive personal data may be processed for health and hospital care purposes, if the sensitive personal data is processed by a health practitioner or other person subject to the obligation of professional confidentiality and the processing is necessary for —
(a) preventive medicine and the protection of public health;
(b) medical diagnosis;
(c) medical research; and (Substituted by Act 2 of 2015)
(d) management of health and hospital care services.
(2) For the purposes of subsection (1), “health practitioner” means a person who is registered under the Health Practitioners Act.
(3) Where —
(a) an enactment specifically governs the processing of sensitive personal data for health purposes; and
(b) there is an inconsistency between this Act and the other enactment,
that other enactment shall prevail.
(Inserted by Act 2 of 2015)