The Controller may not Disclose Personal Data except in the following situations:

1. Data Subject consents to the Disclosure in accordance with the provisions of the Law.
   
   
2. Personal Data has been collected from a publicly available source.
   
   
3. The entity requesting Disclosure is a Public Entity, and the Collection or Processing of the Personal Data is required for public interest or security purposes, or to implement another law, to fulfill judicial requirements.
   
   
4. The Disclosure is necessary to protect public health, public safety, or to protect the lives or health of specific individuals.
   
   
5. The Disclosure will only involve subsequent Processing in a form that makes it impossible to directly or indirectly identify the Data Subject.
   
   
6. The Disclosure is necessary to achieve legitimate interests of the Controller, without prejudice to the rights and interests of the Data Subject, and provided that no Sensitive Data is to be processed.
   The Regulations shall set out the provisions, controls and procedures related to what is stated in paragraphs (2) to (6) of this Article.