VERŻJONI ELETTRONIKA
A 784
(c)
the processing of personal data by a controller not
established in the Union but in a place where the laws of Malta
apply by virtue of public international law.
PART III
Restrictions, Consultation and Prior Authorisation
Restrictions.
5. The Minister may, after consultation with the Commissioner
and with the concurrence of the Minister responsible for justice, by
regulations provide for a restriction to the obligations to which the data
controller or processor is subject pursuant to Article 23 of the
Regulation.
Safeguards and
derogations
relating to
processing for
archiving
purposes in the
public interest,
scientific or
historical
research
purposes or
statistical
purposes.
6. (1) Subject to the provisions of sub-article (4), controllers
and processors may derogate from the provisions of Articles 15, 16, 18
and 21 of the Regulation for the processing of personal data for
scientific or historical research purposes or official statistics in so far as
the exercise of the rights set out in those Articles:
(a) is likely to render impossible or seriously impair the
achievement of those purposes; and
(b) the data controller reasonably believes that such
derogations are necessary for the fulfilment of those purposes.
(2) Subject to the provisions of sub-article (4), controllers and
processors may derogate from the provisions of Articles 15, 16, 18,
19, 20 and 21 of the Regulation for the processing of personal data for
archiving purposes in the public interest in so far as the exercise of
the rights set out in those Articles:
(a) is likely to render impossible or seriously impair the
achievement of those purposes; and
(b) the controller reasonably believes that such
derogations are necessary for the fulfilment of those purposes.
(3) Where data processing referred to in sub-articles (1) and
(2) serves at the same time another purpose, the derogations shall
apply only to processing for the purposes referred to in those subarticles.
(4) Processing for the purposes referred to in sub-articles (1)
and (2) shall be subject to appropriate safeguards for the rights and
freedoms of the data subject, including pseudonymisation and other
technical and organisational measures to ensure respect for the
principle of data minimisation: