c) when it relates to data which are manifestly made public by the data subject, provided his consent for their processing can be clearly inferred from his declaration; d) when it is necessary for the establishment, exercise or defence of legal claims and is exclusively carried out for that purpose. 4. The processing of personal data relating to health and sex life, including genetic data, shall be permitted if it is necessary for the purposes of preventive medicine, medical diagnosis, the provision of medical care or treatment or the management of health-care services, provided the processing of those data are done by a health professional bound by professional secrecy or by another person equally subjected to an equivalent professional secrecy and are notified to CNPD under article 23, and adequate information safety measures are guaranteed/provided. 5. The processing of data referred to in 1 may still be effected with adequate information security measures, when the indispensable security of the state, of public security, and the prevention, investigation or repression of penal infringements are demonstrated. Article 9 (Suspicion of illegal activities, penalties, security measures, infringements, criminal and administrative offences) 1. Central registers relating to persons suspected of illegal activities, criminal and administrative offences and decisions applying penalties, security measures, fines and additional penalties may only be created and kept by public services vested with the specific responsibility by virtue of the law establishing their organisation and functioning, subject to observance of procedural and data protection rules provided for in a legal order, with the prior opinion of the of CNPD. 2. The processing of data related to persons suspected of illegal activities, criminal and administrative offences and decisions applying penalties, security measures, fines and additional penalties may be authorised by the CNPD, subject to observance of the rules for the protection of data and the security of information, when such processing is necessary for pursuing the legitimate purposes of the controller, provided the fundamental rights and freedoms of the data subject are not overridden. 3. The processing of personal data for the purposes of police investigations shall be restricted to the processing necessary to prevent a specific danger or to prosecute a particular offence and to exercise the responsibilities provided for in the respective implementing statutes or another legal provision or in the terms of international agreement or convention to which Cape Verde is a party. Article 10 Combination of personal data 1. The combination of personal data not provided for in a legal provision shall be subject to the authorisation of the Parliamentary Committee of Investigation,