; and (II) the covered personal data is destroyed at such time as it is no longer necessary for such purpose. (x) Exception for consent Clause (i) shall not apply to covered personal data that is obtained by a covered governmental entity if— (I) each covered person linked or reasonably linkable to the covered personal data, or, if such covered person is incapable of providing consent, a third party legally authorized to consent on behalf of the covered person, has provided consent to the acquisition and use of the data on a case-by-case basis; (II) access to and use of the covered personal data is limited to the purposes for which the consent was provided