The Belgian SA held that discussing a data subject's health in a staff meeting where she was absent and documenting this in the minutes of the meeting does not have a legal basis
The Belgian DPA (SA) held that discussing a data subject's health-related personal data in a staff meeting where she was absent and consequently including the data in the minutes of the meeting was incompatible with the purpose of the original processing (personnel management) and did not have any other legal basis to rely on.
https://gdprhub.eu/index.php?title=APD/GBA_(Belgium)_-_115/2022&mtc=today