Processing of special categories of data necessary for reasons of substantial public interest (GDPR art. 9(2)(g)) is allowed only where provided by EU law or, in Italy, by a law, regulation or general administrative act specifying the types of data, the operations, the public interest and appropriate specific safeguards. Paragraph 2 lists matters where the public interest is deemed substantial when the processing is done by bodies with public tasks, including (letter dd) establishing, managing and ending employment relationships, union matters, mandatory placement, social security, equal opportunities, pay, tax and accounting obligations, workplace health and safety and disciplinary and inspection activity. Paragraphs 1-bis and 1-ter govern pseudonymised health data processed by the Ministry of Health and national health agencies. Genetic, biometric and health data remain subject to art. 2-septies.
This control maps to 1 controls across 1 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 1 it maps to, and the evidence behind each claim, over MCP and REST.