| (1) | The prohibition on processing personal information, as referred to in section 26, does not apply if the— |
| (b) | processing is necessary for the establishment, exercise or defence of a right or obligation in law; |
| (c) | processing is necessary to comply with an obligation of international public law; |
| (d) | processing is for historical, statistical or research purposes to the extent that— |
| (i) | the purpose serves a public interest and the processing is necessary for the purpose concerned; or |
| (ii) | it appears to be impossible or would involve a disproportionate effort to ask for consent, |
and sufficient guarantees are provided for to ensure that the processing does not adversely affect the individual privacy of the data subject to a disproportionate extent;
| (e) | information has deliberately been made public by the data subject; or |
| (f) | provisions of sections 28 to 33 are, as the case may be, complied with. |
| (3) | The Regulator may impose reasonable conditions in respect of any authorisation granted under subsection (2). |
