c) the processing is necessary for compliance with a legal obligation; d) the processing is necessary for the establishment, exercise or defence of a legal claim, obtaining legal advice or conduct of a legal proceeding; e) the processing is authorised by law and carried out by a competent public authority; f) the processing is necessary in order to save the life of any person; g) the processing is carried out for purposes of medical care or community welfare; h) the processing is necessary to respond to a specific public health or humanitarian emergency and it is not reasonably possible to establish another legal basis for processing under this sub-article within a reasonable period of time; i) the processing is necessary for the performance of a task carried out in the public interest and in the exercise of official authority vested in the data controller; j) the processing is necessary for the purposes of the legitimate interests of the data controller or by a third party to which the personal data is validly disclosed, except where such interests are overridden by the interests of fundamental rights and freedoms of the data subject; k) the processing is necessary for archiving purposes in the public interest, or for the purpose of historical, statistical or scientific research; or l) the data subject has intentionally made such personal data public. 3. Further processing of personal data other than for the purpose for which it was originally collected shall be compatible with the purpose for which the data was collected. 4. Compatibility in sub-article 3 shall be assessed in light of: a) the relationship between the original purpose and the purpose of the intended further processing; b) the sensitivity of the personal data concerned; c) the consequences and risks of the further processing; d) how the personal data has been collected; and e) the existence of appropriate safeguards. 5. The Authority may prescribe in regulations measures that must be applied to processing of sensitive personal data, categories of sensitive personal data, and classes of data subjects, having regard to: 14