45. Subject to compliance with the Data Protection Regulation and any other relevant enactment or rule of law, the processing of special categories of personal data shall be lawful to the extent the processing is—

(a) authorised by section 41 and sections 46 to 54, or

(b) otherwise authorised by Article 9.