skip to main content

GDPR and OH records — DOccMed MCQ

Instant feedback + full explanation. One question, done properly.

ModerateOH LawGDPR and OH recordsDOccMed

A company director asks you whether occupational health records are subject to GDPR. What is the most accurate advice?

Educational content. Not a substitute for clinical judgement or local policy.

Reveal the answer and explanation

Correct answer: COH records contain health data which is special category data under UK GDPR and requires specific legal bases for processing, secure storage, and defined retention periods

OH records contain health data classified as special category under UK GDPR. This requires a specific lawful basis plus a condition for processing special category data. Both electronic and paper records are covered. Individuals have rights of access.

Reference: UK GDPR; Data Protection Act 2018; FOM Records Guidance