health data and broad consent

Health data is my biggest interest within data protection law. If my health would permit it, I would work in a hospital or pharmacy. I even originally set out to complete my traineeship in medical documentation at a hospital! It fell through because I would have had to move to another state. Alas, now I don't work in any medical settings, but I still work with health data in a boring building instead. Under Article 9 GDPR, health data is considered a special category of data (often called "sensitive data"), and processing is by default prohibited. Processing of personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, and the processing of genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person’s sex life or sexual orientation shall be prohibited. This data can be vast and overlap in practice - some medical information is…