Re: New normal
It should be a process for enabling access when legally restricted to limited pre-approved uses, declared in advance, destroyed when no longer needed, and subject to consent from the patient.
Basically, it needs to be fully subject to GDPR: I should be able to check that there is no data about me included (even if pseudonymised), I should be able to withdraw consent, I should be able to find out who has processed my data, and there must be meaningful fines and penalties for abuse.
Biting the hand that feeds IT
