Changes in How Controllers Handle Health Data in Data Subject Access Requests

In March 2022, the Minister for Health gave effect to the Data Protection Act 2018 (Access Modification) (Health) Regulations 2022 (the “Regulations”) which revise the legal requirements on controllers handling data subject access requests involving health data (i.e. personal data relating to physical or mental health).  The Regulations repeal and replace the previously applicable Data Protection (Access Modification) (Health) Regulations 1989 (the “Previous Regulations”).