Reliance on Substantial Public Interest Exception for Processing Special Categories of Personal Data, v1.0

Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 9(2)(g).

Assessment Step

1
Reliance on Substantial Public Interest Exception for Processing Special Categories of Personal Data (RelianceonSubstantialPublicInterestExceptionforProcessingSpecialCategoriesofPersonalData)
If and when the entity relies on the substantial public interest exception as the lawful basis for processing special categories of personal data, is the processing necessary, based on Union or Member State law, proportionate to the aim pursued, respectful of the right to data protection, and subject to suitable and specific safeguards?
Artifact
A1
Provide evidence (e.g. organizational policies, procedures, compliance/assessment reports, etc.) and supporting notes as appropriate to support the assessor's response to this assessment step.

Conformance Criteria (1)

Reliance on Substantial Public Interest Exception for Processing Special Categories of Personal Data
If the data controller relies on the substantial public interest exception as the lawful basis for processing special categories of personal data, then the processing must be necessary for that interest, be based on Union or Member State law, be proportionate to the aim pursued, respect the essence of the right to data protection, and provide suitable and specific safeguards for the rights and interests of the data subject.
Citation
GDPR
Art. 9(2)(g), Recital 53