Privacy issues around health data have come into sharp relief during the COVID-19 pandemic, focused on the race to develop an effective test and trace system and a vaccine. Whether health data is processed by medical devices, in databases or paper files, protection of this sensitive information is vital. We look at some key regulatory requirements in the UK, France and Germany.