Legal basis

Personal identifiable data Legitimate interest
Special category data

Audit: Provision and management of health management systems (Article 9(2)(h))

Research: For the purposes of conducting statistical research (Article 9(2)(j))
Confidential patient information Secondary use permissions

Permitted uses

Internal audit Yes
Internal research Yes
External audit Yes - see How to access data
External research Yes - see How to access data