public security of a Member State public security of a Member State public security of a Member State public security of a Member State or a third country; or or a third country; or or a third country; or or a third country; or (d) the transfer is necessary in (d) the transfer is necessary in (d) the transfer is necessary in (d) the transfer is necessary in individual cases for the purposes of individual cases for the purposes of individual cases for the purposes individual cases for the purposes set prevention, investigation, detection prevention, investigation, detection set out in Article 1 (1); or out in Article 1 (1); or or prosecution of criminal offences or prosecution of criminal offences or the execution of criminal or the execution of criminal penalties; or penalties; or (e) the transfer is necessary in (e) the transfer is necessary in (e) the transfer is necessary in an (e) the transfer is necessary in an individual cases for the individual cases for the individual cases for the individual case for the establishment, exercise or defence establishment, exercise or defence establishment, exercise or defence establishment, exercise or defence of legal claims relating to the of legal claims relating to the of legal claims relating to the of legal claims relating to the prevention, investigation, detection prevention, investigation, detection purposes set out in Article 1 (1). purposes set out in Article 1 (1). or prosecution of a specific or prosecution of a specific criminal criminal offence or the execution of offence or the execution of a a specific criminal penalty. specific criminal penalty. 2. Personal data shall not be 2. Personal data shall not be transferred if the transferring transferred if the transferring competent authority determines that competent authority determines that fundamental rights and freedoms of fundamental rights and freedoms of the data subject concerned override the data subject concerned override the public interest in the transfer set the public interest in the transfer set out in points (d) and (e) of out in points (d) and (e) of paragraph 1. paragraph 1. 2a. Processing based on paragraph (…) 2 must have a legal basis in Union law, or the law of the Member State to which the controller is subject; that law must meet public
public security of a Member State or a third country; or public security of a Member State or a third country; or public security of a Member State or a third country; or public security of a Member State or a third country; or (d) the transfer is necessary in individual cases for the purposes of prevention, investigation, detection or prosecution of criminal offences or the execution of criminal penalties; or (d) the transfer is necessary in individual cases for the purposes of prevention, investigation, detection or prosecution of criminal offences or the execution of criminal penalties; or (d) the transfer is necessary in individual cases for the purposes set out in Article 1 (1); or (d) the transfer is necessary in individual cases for the purposes set out in Article 1 (1); or (e) the transfer is necessary in individual cases for the establishment, exercise or defence of legal claims relating to the prevention, investigation, detection or prosecution of a specific criminal offence or the execution of a specific criminal penalty. (e) the transfer is necessary in individual cases for the establishment, exercise or defence of legal claims relating to the prevention, investigation, detection or prosecution of a specific criminal offence or the execution of a specific criminal penalty. (e) the transfer is necessary in an individual cases for the establishment, exercise or defence of legal claims relating to the purposes set out in Article 1 (1). (e) the transfer is necessary in an individual case for the establishment, exercise or defence of legal claims relating to the purposes set out in Article 1 (1). 2. Personal data shall not be transferred if the transferring competent authority determines that fundamental rights and freedoms of the data subject concerned override the public interest in the transfer set out in points (d) and (e) of paragraph 1. 2. Personal data shall not be transferred if the transferring competent authority determines that fundamental rights and freedoms of the data subject concerned override the public interest in the transfer set out in points (d) and (e) of paragraph 1. 2a. Processing based on paragraph 2 must have a legal basis in Union law, or the law of the Member State to which the controller is subject; that law must meet public (…)