4. Authorisation concerning the processing of data subject's health information
5. Appropriate safeguards
6. Transfer of personal information outside the Republic