A hospital often refers its patients to specialists. To do so, it needs to send a patient's medical history to other doctors. The privacy notice provided to the hospital's patients includes the provision, "Records may be shared with other health professionals as needed in providing medical care."
Which of the following authorisation statements is appropriate for sharing this type of personal data?
A. "Tick this box if you do not want to share your medical data."
B. "Tick this box if you agree to share your medical data."
C. A statement is not necessary, because doctors do not need to get patients' consent to share medical data.
D. A statement is not necessary, because medical data is not sensitive.
C. "Your name, telephone number and e-mail and home addresses are collected on this website and we may share this information with third parties."
D. "Your name, telephone number and e-mail and home addresses are collected on this website for the purposes of processing and shipping your order. We also may share this information with third parties."