Data Controller UC-17 to UC-21

[henarmartinsantos]

"Access by non-healthcare professional to specific subset of data (e.g. lab test results of one specific blood sampling, like a glucose test) for 24h."

No data controller or user as data controller?

[henarmartinsantos]

- Policy:
    - Recipient: <https://example.org/NonHealthcareProfessional>
- Request:
    - Recipient: <https://example.org/NonHealthcareProfessional>
    - DataController: None or <https://example.org/user21>? 
   Should it be omitted? Should it only be stated if requesting to be DataController?