S.L. 586.8 Art. 37Communication of personal data to other competent authorities.

(1) A communication of personal data, to other competent authorities, shall take place, if the transfer is necessary:

(a) for the purposes set out in regulation 3(1);

(b) in order to protect the vital interests of the data subject or another person; or

(c) to safeguard the legitimate interests of the data subject or the controller:

Provided that the transferring competent authority determines that fundamental rights and freedoms of the data subject concerned do not override the interests necessitating the communication.

(2) A communication of personal data as contemplated in sub-regulation (1) may also take place if:

(a) there exists a legal obligation or authorisation to communicate such personal data; or

(b) the Commissioner authorises such communication of personal data.