(2) Previous Paragraph (1) shall not apply where: (a) the processing is necessary to carry out the specific obligations and rights of the controller in the field of employment law; or (b) the processing is necessary to comply with national social security laws; or (c) the processing is necessary for the promotion and protection of public health, including medical examination of the population; or (d) the processing is required by or by virtue of a law or any equivalent legislative act for reasons of substantial public interest; or (e) the processing is necessary to protect the vital interests of the data subject or another person, where the data subject is physically or legally incapable of giving his/her consent or is not represented by his/her legal, judicial or agreed representative; or (f) the processing is necessary for the prevention of imminent danger or the mitigation of a specific criminal offence; or (g) the processing relates to data which has apparently been made public by the data subject; or (h) the processing is necessary for the establishment, exercise or defense of legal rights; or (i) the processing is required for the purposes of scientific research or (j) the processing is necessary for the purposes of preventive medicine or medical diagnosis, the provision of care or treatment for the data subject or to one of his/her relatives, or the management of health-care services in the interest of the data subject, and the data is processed under the supervision of a health professional; (3) (a) Health-related personal data may only be processed under the responsibility of a health-care professional, except if the data subject has given his/her written consent or if the processing is necessary for the prevention of imminent danger or for the mitigation of a specific criminal offence. (b) Health-related personal data must be collected from the data subject. Draft Data Protection Bill Version 1.0 28