Article 9 of the GDPR Lists Exceptions to the General

Article 9 of the GDPR lists exceptions to the general prohibition against processing biometric data. Which of the following is NOT one of these exceptions?

A) The processing is done by a non-profit organization and the results are disclosed outside the organization.
B) The processing is necessary to protect the vital interests of the data subject when he or she is incapable of giving consent.
C) The processing is necessary for the establishment, exercise or defense of legal claims when courts are acting in a judicial capacity.
D) The processing is explicitly consented to by the data subject and he or she is allowed by Union or Member State law to lift the prohibition.