data provided that this consent is not restricted by any other applicable law, and
any of the following:
(i) for exercising or defending any right or obligation which is conferred or
imposed by law on the data controller in connection with employment; or
(ii) to protect the vital interests of the data subject or another person, in a case
where—
(a) consent cannot be given by or on behalf of the data subject; or
(b) the data controller cannot reasonably be expected to obtain the
consent of the data subject;
(iii) to protect the vital interests of another person, in a case where consent by
or on behalf of the data subject has been unreasonably withheld;
(iv)
for medical purposes which are undertaken by—
(a) a healthcare professional; or
(b) a person who in the circumstances owes a duty of confidentiality
which may arise and shall be equivalent as if that person was a
healthcare professional;
(v)
(vi)
(vii)
(viii)
for, or in connection with, any legal proceedings;
for obtaining legal advice while ensuring its integrity and secrecy;
for establishing, exercising, or defending legal rights;
for the administration of justice under orders of a court of competent
jurisdiction; or
(ix)
for the exercise of any functions conferred on any person by or under any
written law;
(b) the information contained in the personal data is made public advertently by the
data subject.
(2) The Commission may by order published in the Gazette exclude the application of
clauses (i), (viii), or (ix) of clause (b) of sub-section (1) in such cases as may be
specified in the order, or provide that, in such cases, as may be specified in the order,
any condition mentioned in the aforementioned clauses is not to be regarded as
satisfied unless such further conditions as may be specified in the order are also
satisfied.
CHAPTER V
19