Communication or shared use of personal data from a legal entity of public law to a legal entity of private law shall be communicated to the national authority and shall rely on the consent of the data subject, except:
I – in situations in which consent is waived as provided in this Law;
II – when there is shared use of data, which will be publicized pursuant to Item I of the lead sentence of Art. 23 of this Law; or
III – in the exceptions contained in §1 of Art. 26 of this Law.