Schedule 2Data Protection Law, 2017
FIRST PRINCIPLE - CONDITIONS FOR PROCESSING OF PERSONAL DATA
1The data subject has given consent to the processing.
2The processing is necessary for —
(a)the performance of a contract to which the data subject is a party; or
(b)the taking of steps at the request of the data subject with a view to entering into a contract.
3The processing is necessary for compliance with any legal obligation to which the data controller is subject, other than an obligation imposed by contract.
4The processing is necessary in order to protect the vital interests of the data subject.
5The processing is necessary for —
(a)the administration of justice;
(b)the exercise of any functions conferred on any person by or under any enactment;
(c)the exercise of any functions of the Crown or any public authority; or
(d)the exercise of any other functions of a public nature exercised in the public interest by any person.
6The processing is necessary for the purposes of legitimate interests pursued by the data controller or by the third party or parties to whom the data are disclosed, except if the processing is unwarranted in any particular case by reason of prejudice to the rights and freedoms or legitimate interests of the data subject.
7The Cabinet may, by regulations, specify particular circumstances in which the condition set out in paragraph 6 shall, or shall not, be taken to be satisfied.