c) when it relates to data which are manifestly made public by the data subject,
provided his consent for their processing can be clearly inferred from his
declaration;
d) when it is necessary for the establishment, exercise or defence of legal
claims and is exclusively carried out for that purpose.
4. The processing of personal data relating to health and sex life, including genetic
data, shall be permitted if it is necessary for the purposes of preventive
medicine, medical diagnosis, the provision of medical care or treatment or the
management of health-care services, provided the processing of those data are
done by a health professional bound by professional secrecy or by another
person equally subjected to an equivalent professional secrecy and are notified
to CNPD under article 23, and adequate information safety measures are
guaranteed/provided.
5. The processing of data referred to in 1 may still be effected with adequate
information security measures, when the indispensable security of the state, of
public security, and the prevention, investigation or repression of penal
infringements are demonstrated.
Article 9
(Suspicion of illegal activities, penalties, security measures, infringements,
criminal and administrative offences)
1. Central registers relating to persons suspected of illegal activities, criminal and
administrative offences and decisions applying penalties, security measures,
fines and additional penalties may only be created and kept by public services
vested with the specific responsibility by virtue of the law establishing their
organisation and functioning, subject to observance of procedural and data
protection rules provided for in a legal order, with the prior opinion of the of
CNPD.
2. The processing of data related to persons suspected of illegal activities, criminal
and administrative offences and decisions applying penalties, security measures,
fines and additional penalties may be authorised by the CNPD, subject to
observance of the rules for the protection of data and the security of information,
when such processing is necessary for pursuing the legitimate purposes of the
controller, provided the fundamental rights and freedoms of the data subject are
not overridden.
3. The processing of personal data for the purposes of police investigations shall be
restricted to the processing necessary to prevent a specific danger or to prosecute
a particular offence and to exercise the responsibilities provided for in the
respective implementing statutes or another legal provision or in the terms of
international agreement or convention to which Cape Verde is a party.
Article 10
Combination of personal data
1. The combination of personal data not provided for in a legal provision shall be
subject to the authorisation of the Parliamentary Committee of Investigation,