S.L. 528.11 Art. 4Data protection. Cap. 586.

(1) Nothing in these regulations shall prejudice in any way the applicability of Regulation No 2016/679 and the Data Protection Act and the fundamental rights and freedoms of the applicants.

(2) The Directorate, while acting in its capacity of a controller in accordance with Article 4(7) of Regulation No 2016/679, shall perform the relevant data processing operations that are strictly necessary for establishing whether the applicant is entitled to an exemption from payment of health care fees, as may be established by law, from time to time.

(3) The personal data processed by the Directorate shall be processed in compliance with the principles relating to processing of personal data in accordance with Article 5 of Regulation No 2016/679.