[overscore]

In the EU, those cases would be covered by the lawful basis of being in the vital interest of data subject. However, that would only cover that particular reason for processing, and in the scenarios above would be handled by a public health authority. It would not allow personal data to transfer to a third party for the purpose of continued research.