Greece Law 4624/2019 - Hellenic Data Protection Authority (HDPA) Implementation Act Art.22.1: Article 22(1) and (2): process special categories only on the listed national grounds

By way of derogation from Article 9(1) GDPR, public and private bodies may process special categories where necessary for social security and social protection rights and obligations; preventive medicine, assessment of an employee's working capacity, diagnosis, health or social care or its management, or under a contract with a health professional bound by secrecy; or public interest in public health (with professional secrecy rules observed). Public bodies may also do so where strictly necessary for essential public interest, necessary to prevent major threats to national or public security, or necessary for humanitarian action where it outweighs the data subject's interests.