{
  "package" : "hl7.terminology.r4@6.3.0",
  "definition" : "Processing of personal data, inclusive of the special categories of data, is lawful if necessary for compliance with a legal obligation to which the controller is subject. \\r\\n\\r\\nThis includes the processing of the special categories of data that are necessary for the purposes of carrying out the obligations and exercising specific rights of the controller or of the data subject in the field of employment and social security and social protection law in so far as it is authorised by Union or Member State law or a collective agreement pursuant to Member State law providing for appropriate safeguards for the fundamental rights and the interests of the data subject.",
  "system" : "http://terminology.hl7.org/CodeSystem/v2-0717",
  "property" : [ {
    "_uri" : "http://terminology.hl7.org/CodeSystem/utg-concept-properties#v2-concComment",
    "code" : "v2-concComment",
    "valueString" : "The description is based on the following GDPR provisions:\r\nArticle 6.1.c https://gdpr-info.eu/art-6-gdpr/\r\n1Processing shall be lawful only if and to the extent that at least one of the following applies: (c) processing is necessary for compliance with a legal obligation to which the controller is subject.\r\nArticle 9.1, 9.2.b https://gdpr-info.eu/art-9-gdpr/\r\n1. Processing of personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, and the processing of genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person’s sex life or sexual orientation shall be prohibited.\r\n2. Paragraph 1 shall not apply if one of the following applies:\r\n(b) processing is necessary for the purposes of carrying out the obligations and exercising specific rights of the controller or of the data subject in the field of employment and social security and social protection law in so far as it is authorised by Union or Member State law or a collective agreement pursuant to Member State law providing for appropriate safeguards for the fundamental rights and the interests of the data subject."
  }, {
    "_uri" : "http://terminology.hl7.org/CodeSystem/utg-concept-properties#status",
    "code" : "status",
    "valueCode" : "N"
  } ],
  "codesystem" : "77f6cda3-8025-5825-90d9-b1c3b45a5a74",
  "concept_id" : "b2133fa5-312a-508f-abed-c54cebf9389e",
  "ancestors" : {
    "GDPRLEGALOBL" : 0
  },
  "id" : "103973fc-1a7d-4b92-8bc4-72af569310af",
  "code" : "GDPRLEGALOBL",
  "display" : "GDPR legal obligation",
  "version" : "2.0.0"
}