Guidelines 03/2020 on the processing of data concerning health for the purpose of scientific research in the context of the COVID-19 outbreak

Subparagraph 5.1.2.3  Serious impairment of objectives 

39. To rely on this exception, data controllers must demonstrate that the provision of the information set out in Article 14(1) per se would render impossible or seriously impair the achievement of the objectives of the processing.

40. In a case where the exemption of Article (14) (5) (b) GDPR applies, “the controller shall take appropriate measures to protect the data subject’s rights and freedoms and legitimate interests, including making the information publicly available”.