Malta Data Protection Act (Cap. 586, 2018) art.7: Article 7: consult and obtain the Commissioner's prior authorisation for public-interest processing of genetic, biometric or health data for research or statistics, and of special categories for social care management

What does art.7 require?

A controller must consult the Commissioner and obtain prior authorisation before processing in the public interest genetic data, biometric data or data concerning health for statistical or research purposes, or special categories of data for managing social care services and systems (including quality control, management information and national supervision and monitoring of those services). For research with genetic, biometric or health data the Commissioner consults a research ethics committee or an institution the Commissioner recognises.