277 permitted under this section. General exemption on sensitive personal information 36. without prejudice to sections 29 to 35, the prohibition on processing personal information shall not apply where - (a) (b) (c) processing is carried out with prior parentar consent where the data subject is a child and is subject to parental control in terms of the law; processing is necessary for the estabrishment, exercise or defence of a right or obligation in law; processing is necessary to comply with an obtigation of international public law ; (d) (e) the Commission has granted authority in terms of section 37 for processing in the public interest, and appropriate guarantees have been put in place in law to pr.otect the data subject's privacy; processing is carried out with the consent of the data sub- ject; or (f) the information has deriberarely been made pubric by the data subject. Authorisation by the Commission . (1) The Commission may authorise a data controllel to process personal infotmation, where the Commission is satisfied that, in the circumstances 37 of the case(a) the public intelest in the processing outweighs, to a substantial degree, any intelference with the privacy of the data subject that could result fi-om such pr.ocessing; or. (b) the processing involves a clear benefit to the clata subject or a thild party tirat outweighs, to a substantial degree,