Subject to suitable and specific measures being taken to safeguard the fundamental rights and freedoms of data subjects, the processing of data concerning health shall be lawful where the processing is necessary and proportionate for the purposes of the following:
(a) a policy of insurance or life assurance,
(b) a policy of health insurance or health-related insurance,
(c) an occupational pension, a retirement annuity contract or any other pension arrangement, or
(d) the mortgaging of property.