(1) |
The prohibition on processing personal information, as referred to in section 26, does not apply if the— |
(b) |
processing is necessary for the establishment, exercise or defence of a right or obligation in law; |
(c) |
processing is necessary to comply with an obligation of international public law; |
(d) |
processing is for historical, statistical or research purposes to the extent that— |
(i) |
the purpose serves a public interest and the processing is necessary for the purpose concerned; or |
(ii) |
it appears to be impossible or would involve a disproportionate effort to ask for consent, |
and sufficient guarantees are provided for to ensure that the processing does not adversely affect the individual privacy of the data subject to a disproportionate extent;
(e) |
information has deliberately been made public by the data subject; or |
(f) |
provisions of sections 28 to 33 are, as the case may be, complied with. |
(3) |
The Regulator may impose reasonable conditions in respect of any authorisation granted under subsection (2). |