Personal Data Protection Act, No. 9 of 2022 (g) 55 for the purpose of item (e) of this Schedule, “public interest” includes(i) processing of personal data is necessary for health purposes such as public health and social protection and the management of health care services; (ii) processing of personal data is necessary for the control of communicable deceases and other serious threats to health; (iii) processing of personal data is necessary by official authorities for achieving the purposes or objects laid down by law. (h) for the purpose of item (f) of this Schedule, “legitimate interest” includes– (i) processing in situations where the data subject is a client or in the service of a controller; (ii) whether a data subject reasonably expects at the time and in the context of the collection of the personal data that processing for that purpose may take place; (iii) processing of personal data is strictly necessary for the purposes of preventing fraud; (iv) processing of personal data to the extent strictly necessary and proportionate for the purposes of ensuring network and information security. (Section 5 (b)) SCHEDULE II CONDITIONS FOR PROCESSING SPECIAL CATEGORIES OF PERSONAL DATA (a) the data subject has given consent, to the processing of special categories of personal data for one or more purposes specified by the controller at the time of processing, unless any other written law prohibits the processing of such personal data notwithstanding the consent of the data subject concerned. In the case of a child, consent shall mean the consent of the parent or legal guardian of such child; or