| (1) |
The prohibition on processing personal information, as referred to in section 26, does not apply if the— |
| (b) |
processing is necessary for the establishment, exercise or defence of a right or obligation in law; |
| (c) |
processing is necessary to comply with an obligation of international public law; |
| (d) |
processing is for historical, statistical or research purposes to the extent that— |
| (i) |
the purpose serves a public interest and the processing is necessary for the purpose concerned; or |
| (ii) |
it appears to be impossible or would involve a disproportionate effort to ask for consent, |
and sufficient guarantees are provided for to ensure that the processing does not adversely affect the individual privacy of the data subject to a disproportionate extent;
| (e) |
information has deliberately been made public by the data subject; or |
| (f) |
provisions of sections 28 to 33 are, as the case may be, complied with. |
| (3) |
The Regulator may impose reasonable conditions in respect of any authorisation granted under subsection (2). |