1. Processing operations likely to present specific risks to the rights and freedoms of data subjects by virtue of their nature, their scope or their purposes shall be subject to prior checking by the European Data Protection Supervisor.
2. The following processing operations are likely to present such risks:
(a) processing of data relating to health and to suspected offences, offences, criminal convictions or security measures;
(b) processing operations intended to evaluate personal aspects relating to the data subject, including his or her ability, efficiency and conduct;
(c) processing operations allowing linkages not provided for pursuant to national or Community legislation between data processed for different purposes;
(d) processing operations for the purpose of excluding individuals from a right, benefit or contract.
3. The prior checks shall be carried out by the European Data Protection Supervisor following receipt of a notification from the Data Protection Officer who,