> Yes, but to be GDPR compliant I _have_ to remove that link. As you > reported in an earlier email, they say that you can't link patient and > medication if not with an external resource. In this case we are linking > them without an external resource.... I REALLY doubt that. I believe you when you say "they say that ..." but I truly doubt that GDPR intended to make data processing fully impractical. (I work in the medical field) Karsten