(2) Previous Paragraph (1) shall not apply where:
(a) the processing is necessary to carry out the specific
obligations and rights of the controller in the field of
employment law; or
(b) the processing is necessary to comply with national social
security laws; or
(c) the processing is necessary for the promotion and protection
of public health, including medical examination of the
population; or
(d) the processing is required by or by virtue of a law or any
equivalent legislative act for reasons of substantial public
interest; or
(e) the processing is necessary to protect the vital interests of
the data subject or another person, where the data subject is
physically or legally incapable of giving his/her consent or is
not represented by his/her legal, judicial or agreed
representative; or
(f) the processing is necessary for the prevention of imminent
danger or the mitigation of a specific criminal offence; or
(g) the processing relates to data which has apparently been
made public by the data subject; or
(h) the processing is necessary for the establishment, exercise
or defense of legal rights; or
(i) the processing is required for the purposes of scientific
research
or
(j) the processing is necessary for the purposes of preventive
medicine or medical diagnosis, the provision of care or
treatment for the data subject or to one of his/her relatives,
or the management of health-care services in the interest of
the data subject, and the data is processed under the
supervision of a health professional;
(3)
(a) Health-related personal data may only be processed under
the responsibility of a health-care professional, except if the
data subject has given his/her written consent or if the
processing is necessary for the prevention of imminent
danger or for the mitigation of a specific criminal offence.
(b) Health-related personal data must be collected from the data
subject.
Draft Data Protection Bill Version 1.0
28