Section 37 Regulator may exempt processing of personal information
The Regulator may, by notice in the Gazette, grant an exemption to a responsible party to process personal information, even if that processing is in breach of a condition for the processing of such information, or any measure that gives effect to such condition, if the Regulator is satisfied that, in the circumstances of the case—
the public interest in the processing outweighs, to a substantial degree, any interference with the privacy of the data subject that could result from such processing; or
the processing involves a clear benefit to the data subject or a third party that outweighs, to a substantial degree, any interference with the privacy of the data subject or third party that could result from such processing.
The public interest referred to in subsection (1) includes—
the interests of national security;
the prevention, detection and prosecution of offences;
important economic and financial interests of a public body;
fostering compliance with legal provisions established in the interests referred to under paragraphs (b) and (c);
historical, statistical or research activity; or
the special importance of the interest in freedom of expression.
The Regulator may impose reasonable conditions in respect of any exemption granted under subsection (1).