In addition to having a lawful basis for processing, to process special category sensitive data further conditions for processing need to be met and recorded in your DPIA, including if: the data subject has explicitly consented to the processing the processing is necessary for you to carry out your obligations and exercise specific rights in the field of employment and social security and social protection law the processing is necessary to protect the vital interest of a data subject or another person and the data subject is incapable of giving consent you are a not-for-profit body processing special category data as part of your legitimate activities the processing relates to personal data that has been made public by the data subject the processing is concerning legal claims or judicial acts the processing is necessary for reasons of substantial public interest the processing is necessary for health or social care purposes the processing is necessary due to public interest in public health the processing is necessary for statistical or archiving purposes, scientific or historical research purposes and is in the public interest For more information on these further conditions for processing, read Compliance for DPIAs. Note that if you wish to process special category sensitive data for reasons of substantial public interest, you will need to meet further ‘associated conditions’. For more information on this, read Substantial public interest for DPIAs.