Page 28 1) Provisional withdrawal of license; 2) Definitive withdrawal of license; 3) Pecuniary fine. Article II – 26: In case of emergency, where the processing or use of personal data results in violation of rights and freedoms, the protection authority may, after adversarial proceedings, decide as follows: 1) Interruption of data processing; 2) Locking up some of the personal data processed; 3) Temporary or definitive prohibition of any processing at variance with the provisions of this Convention. Article II – 27: The sanctions imposed and decisions taken by the protection authority are subject to appeal. Part IV: Obligations relating to the conditions governing the processing of personal data Chapter 1: Basic principles governing the processing of personal data Section 1: Principle of consent and of legitimacy of personal data processing Article II – 28: Processing of personal data shall be deemed to be legitimate where the person concerned has given his/her consent. This requirement may however be excepted where the processing is required to: 1) Obtain compliance with a legal obligation to which the processing official subject; AU Draft0 010111 is