Legal basis
| Personal identifiable data | Legitimate interest | 
| Special category data | For the purposes of conducting statistical research (Article 9(2)(j)) | 
| Confidential patient information | Common law consent | 
Permitted uses
| Internal audit | Yes | 
| Internal research | Yes | 
| External audit | Yes - see How to access data | 
| External research | Yes - see How to access data |