Responsible and in charge of processing in the conduct and conservation of analytics

In the case described in the consultation, the hospital that subcontracts the conduct of its patients' analytics to a laboratory is responsible for the treatment, as it is the one who "determines the purposes and the treatment" of the patients' data, and the laboratory is responsible for the processing of this data. The fact that the laboratory has to keep certain personal data blocked, which it has processed in order to provide hospitals for the period corresponding to the patient's autonomy rules does not undermine the conclusion that the laboratory is a treatment officer.