Legal basis

Personal identifiable data Legitimate interest
Special category data For the purposes of conducting statistical research (Article 9(2)(j))
Confidential patient information Common law consent

Permitted uses

Internal audit Yes
Internal research Yes
External audit Yes - see How to access data
External research Yes - see How to access data