No. 136 Chapter 69 Gor Government Gazette 27 May 2019 particular for achieving the purposes in relation to scientific, historical, or statistical research purposes. In such cases, the Data Controller shall take suitable measures to protect the data subject 's rights, freedoms and interests; (3) the use or disclosure of the Personal Data sh al l be c ar r i e d out on an urgent basis as required by law, and suitable measures have been implemented to protect the data subject's interest; or (4) the Data Controller is aware of or acquires such Personal Data from his or her duty or occupation or profession, and shall maintain the confidentiality of any of the new purposes or information details as prescribed in Section 23 as required by law. To notify the information details in paragraph two, the Data Controller shall provide such information to the data subject within thirty days after the date of collection such of Personal Data, unless the Personal Data are to be used for communication with the data subject, the notice of information details shall be provided at the time of the first communication to that data subject. If a disclosure to another Person is envisaged, the notice of information details shall be provided prior to the time of the first disclosure. Section 26 Any collection of Personal Data pertaining to racial, ethnic origin, political opinions, cult, religious or philosophical beliefs, sexual behavior, criminal records, health data, disability, trade union information, genetic data, biometric data, or of any data which may affect the data subject in the same manner, as prescribed by the Committee, is prohibited, without the explicit consent from the data subject, except where: (1) it is to prevent or suppress a danger to life, body or health of the Person, w h e r e the data subject is incapable of giving consent by whatever reason; (2) it is carried out in the course of legitimate activities with appropriate safeguards by the foundations, associations or any other not-for-profit bodies with a political, religious, philosophical, or trade union purposes for their members, former members of the bodies, or persons having regular contact with such foundations, associations or not-for-profit bodies in connection with their purposes, without disclosing the Personal Data outside of such foundations, associations or not-for-profit bodies; (3) it is information that is disclosed to the public with the explicit consent of the data subject; (4) it is necessary for the establishment, compliance, exercise or defense of legal claims; (5) it is necessary for compliance with a legal obligation to achieve the purposes with respect to: (a) preventive medicine or occupational medicine, the assessment of working capacity of the employee, medical diagnosis, the provision of health or social care, medical treatment, the management of health or social care systems and services. In the event that it is not for compliance with the legal obligation, and such Personal Data is under the responsibility of the occupational or profession practitioner or person having the duty to 12