artistic, and literary works and preparing statistical information. 11.4.The rights and legitimate interests of the data subject and others may not be violated in creating historical, scientific, artistic, and literary works and preparing statistical information. 11.5. Sub-paragraphs 16.1.1, 16.1.2 and 16.1.3 of this Law shall not apply to the data subject for processing and using data for the purposes specified in Paragraph 11.1 of this Law. 11.6. Security measures shall be taken in accordance with Article 20 of this Law for processing and using data for the purpose of creating historical, scientific, artistic and literary works and preparing statistical information. Article 12. Data Collection, Processing and Use for Journalistic Purposes 12.1. Data may be collected, processed, and used for journalistic purposes or protecting public interests. 12.2. It is prohibited to collect, process, and use data regarding health, correspondence, genetic and biometric data, sexual and gender orientation, expression, and sexual relations for the purposes specified in Paragraph 12.1 of this Law without the consent of the data subject. 12.3. The rights and legitimate interests of the data subject and others may not be violated during the data collection, processing and use for journalistic purposes. Article 13. Data Collection, Processing and Use Following the Death of the Data Subject 13.1. Unless otherwise provided by law, if the data subject is deceased or is considered to be deceased, the relevant data shall be collected, processed, and used based on the will or the written consent of his or her family member, or legal representative. 13.2. Unless otherwise provided by law, if 70 years passed since the death of the data subject, a consent is not required for the collection, processing or use of sensitive information. Article 14. Data Transfer to Foreign Individuals, Legal Entities, and International Organizations 14.1. Data transfer to foreign individuals, legal entities, or international organizations is prohibited, except as provided in laws, international treaties which Mongolia is a party, or with the consent of the data subject. Article 15. Data Erasure 15.1. Data controller shall erase the data on the following grounds: 15.1.1. By the request of the data subject, if the data has not been collected, processed, or used in accordance with the grounds and procedures provided by the law. 15.1.2. Data controller's obligation to erase the data under the laws, international treaties to which Mongolia is a party, and legally enforceable court decisions. 15.1.3. Data other than collected and processed under the law has achieved the purpose for which it was originally collected or has been specified in the contract or has been mutually agreed upon. 15.1.4. Other grounds, as provided by law. 15.2. Unless otherwise provided by law, data erasure shall be prohibited except for the grounds specified in Paragraph 15.1 of this Law. Chapter three Data subject's rights and obligations Article 16. Data Subject's Rights