3. Is a Data Controller, that is a public entity or healthcare provider, permitted to contact individuals in relation to COVID-19 without having prior consent?
The DP Regulations do not prevent any health professionals from sending public health messages to people, either by phone, text or email, as these messages are not direct marketing.
Public bodies may also require additional collection and sharing of Personal Data for the purpose of protection against serious threats to public health. This is a legitimate purpose for collecting and processing such Personal Data.