(4) The Authority shall be entitled to specify the conditions under which such processing may be carried out. (5) It may only be collected from other sources if paragraphs (3) and (4) above are complied with, and if such is necessary for the purposes of the processing, or if the data subject is incapable of providing the data. (6) For the purposes of the processing of personal information affected by this Section, the health professional and his/her agents are subject to the duty of professional secrecy. (7) In the scope of the above sections, The processing of genetic data, shall be authorized if is is they are processed for what it they reveals or contains and personal data concerning health shall can be processed only if a unique patient identifier is given to the patient which is distinct from any other identification number, by the public authority established for this purpose. (8) The association of this unique patient identifier with any other identifier which permits the identification of the data subject in the sense of section 19 is permissible only with by the express authorization of the Authority. The personal data of a child shall will be processed subject to section 37. only in respect of the rules of representation pursuant to section 37. Draft Data Protection Bill Version 1.0 29