Under the GDPR, vital interests is a grounds for processing personal data when it is a matter of life or death.