It's not so clear cut. There are several reasons that GDPR can be legitimately ignored, it's not a hard and fast block on sharing everything. GDPR was ignored for various data scrapes related to Coronavirus for example, and quite rightly.
The problem, as always, is that you can't trust the current Government not to ignore the rules and claim that whatever need they have to share the data is legitimate. And share it too broadly. And let the people they share it with use it for things other than the immediate/legitimate need. And not ensure that the data is destroyed the second they've finished using it. etc. etc.
I know, but this involves specifically sharing data with a much larger organisation(s) and certainly does not involve my personal healthcare, ie. the data processing is nothing like what I signed up for in the first place, so explicit agreement should be required.
It's not so clear cut. There are several reasons that GDPR can be legitimately ignored, it's not a hard and fast block on sharing everything. GDPR was ignored for various data scrapes related to Coronavirus for example, and quite rightly.
The problem, as always, is that you can't trust the current Government not to ignore the rules and claim that whatever need they have to share the data is legitimate. And share it too broadly. And let the people they share it with use it for things other than the immediate/legitimate need. And not ensure that the data is destroyed the second they've finished using it. etc. etc.