Which of the following conditions is generally not a valid basis for processing sensitive personal information under data protection regulations?
a. Explicit consent from the individual
b. Legal obligation to process the information
c. Legitimate interests of the data controller
d. Publicly available information`