(46) The processing of personal data should also be considered lawful in cases where it is necessary to protect an interest that is vital to the life of the data subject or another individual. The vital interest of another individual should generally be the basis for processing personal data only in cases where it is clearly impossible to base the processing on any other legal basis. Certain types of processing may serve both an important public interest and the vital interests of the data subject, such as when the processing is necessary for humanitarian purposes, including monitoring epidemics and their spread, or in humanitarian emergencies, particularly natural and man-made disasters.
„We completed the implementation of the GDPR a couple of years ago."
Are you sure about that?

