f. administrative bodies, pension funds, employers or institutions working for them, provided
that this is necessary for:
1º. the proper implementation of the provisions of laws, pension regulations or collective
agreements which create rights dependent on the state of health of the data subject, or
2º. the reintegration of or support for workers or persons entitled to benefit in connection with
sickness or work incapacity.
2. In the cases referred to under (1), the data may only be processed by persons subject to an
obligation of confidentiality by virtue of office, profession or legal provision, or under an
agreement. Where responsible parties personally process data and are not already subject to an
obligation of confidentiality by virtue of office, profession or legal provision, they are required to
treat the data as confidential, except where they are required by law or in connection with their
duties to communicate such data to other parties who are authorised to process such data in
accordance with (1).
3. The prohibition on processing other personal data, as referred to in Article 16, does not apply
where this is necessary to supplement the processing of personal data concerning a person's
health, as referred to under (1)(a), with a view to the proper treatment or care of the data subject.
4. Personal data concerning inherited characteristics may only be processed, where this
processing takes place with respect to the data subject from whom the data concerned have been
obtained, unless:
a. a serious medical interest prevails, or
b. the processing is necessary for the purpose of scientific research or statistics.
In the case referred to under (b), Article 23(l)(a) and (2) shall likewise be applicable.
5. More detailed rules may be issued by general administrative regulation concerning the
application of (1)(b) and (e).
Article 22
1. The prohibition on processing personal data concerning a person's criminal behaviour, as
referred to in Article 16, does not apply where the processing is carried out by bodies, charged
by law with applying criminal law and by responsible parties who have obtained these data in
accordance with the Police Registers Act (Wet politieregisters) or the Judicial Documentation Act
(Wet justitiële documentatie).
2. The prohibition does not apply to responsible parties who process these data for their own
purposes with a view to:
a. assessing an application by data subjects in order to take a decision about them or provide a
service to them, or
b. protecting their interests, provided that this concerns criminal offences which have been or, as
indicated by certain facts and circumstances, can be expected to be committed against them or
against persons in their service.