Special categories of personal data may be processed only in cases where one of the following conditions is met:

• The explicit consent of the data subject.
• Personal data, except for data concerning health and sexual life, may be processed without seeking explicit consent of the data subject, in the cases provided for by laws. Personal data concerning health and sexual life may only be processed without seeking explicit consent of the data subject by the persons subject to an obligation of secrecy or competent public institutions and organizations, for the purposes of protection of public health, operation of preventive medicine, medical diagnosis, treatment and nursing services, planning and management of health-care services as well as their financing
• Adequate measures determined by the Board shall be also taken while processing the special categories of personal data.

For the Decision of the Personal Data Protection Board of 31/01/2018 and no 2018/10 on "Adequate Measures to be taken for the Processing Special categories of personal data" ..