Consent will not be the most appropriate legal basis* for most processing undertaken in community pharmacies.

Consent must be:

• freely given
• specific
• informed
• an unambiguous indication of the data subject’s wishes.

*Legal basis for processing – Community Pharmacy has a Legal Obligation to process the data, or it is processed for the performance of a Contract with the data subject.

Processing of special category data in Community Pharmacy is necessary for the provision of health or social care treatment, or the management of health care systems and services.

You will have to have explicit consent for additional pharmacy services e.g. collection and delivery.

NB: Use the ICO’s Guidance on consent document if you collect personal data for marketing purposes.