Subject to suitable and specific measures to safeguard the fundamental rights and freedoms of data subjects, the processing of special categories of personal data shall be lawful where it is necessary for public interest reasons in the area of public health including -
(a) protecting against serious cross-border threats to health, and
(b) ensuring high standards of quality and safety of health care and of medicinal products and medical devices.