Recital 52

(52) Exceptions to the prohibition on processing special categories of personal data should also be allowed - where provided for by Union or Member State law and subject to adequate safeguards to protect personal data and other fundamental rights - if justified by the public interest, in particular involving the processing of personal data in the field of labor law, social security law, including pensions, and for the purposes of security, health monitoring and warning, prevention of communicable diseases and other serious health threats. Such an exception may be provided for health purposes, including those related to public health and the management of health care services, in particular ensuring the quality and cost-effectiveness of procedures used to settle claims for benefits and services under the health insurance system, or for archival purposes in the public interest, scientific or historical research purposes or statistical purposes. There should also be an exception allowing the processing of such personal data if it is necessary for the establishment, investigation or defense of claims in judicial, administrative or other extrajudicial proceedings.

Receive a free package of 4 tutorials and 4 e-learning trainings
The controller of your data is ODO 24 sp. z o. o.
Recital 52 of the preamble to the GDPR | ODO 24