(g) any further information which is necessary having regard to the
specific circumstances, such as the –
i. recipient or category of recipients of the information;
ii. nature or category of the information; and
iii. existence of the right of access to and the right to recifty the
information collected.
(2) The steps referred to in subsection (1) shall be taken –
(a) before the information is collected, unless the data subject is already
aware of the information under subsection (1); or
(b) in any other case, as soon as reasonably practicable after it has been
collected.
(3) A data controller which has previously taken the steps referred to in subsection
(1) shall be in compliance with subsection (1) in relation to the subsequent
collection from the data subject of the same information or information of the
same kind if the purpose of collection of the information is unchanged.
(4) A data controller may not comply with subsection (1) where –
(a) the data subject has provided consent for the non-compliance;
(b) non compliance would not prejudice the legitimate interests of the
data subject as set out under this Act;
(c) non compliance is necessary –
i. to avoid prejudice to the maintenance or enforcement of law
and order;
ii. to enforce a law imposing a pecuniary penalty;
iii. to enforce legislation concerning the collection of revenue by
the state;
iv. for the conduct of proceedings in any court or tribunal that
have been commenced or are reasonably contemplated; or