(g)
whether or not the data collected shall be processed and whether
or not the consent of the data subject shall be required for such
processing; and
(h)
his right of access to, the possibility of correction of and
destruction of, the personal data to be provided.
(3)
A
data
controller
shall
not
be
required
to
comply
with
subsection (2) –
(a)
in respect of a data subject where –
(i)
compliance with subsection (2) in respect of a
second or subsequent collection will be to repeat, without
any material difference, what was done to comply with that
subsection in respect of the first collection; and
(ii)
not more than 12 months have elapsed between
the first collection and this second or subsequent
collection.
(b)
where –
(i)
compliance is not reasonably practicable at the
time of collection, provided that the data controller makes
available to the data subject all the relevant information
specified in subsection (2) as soon as practicable; or
(ii)
the data is used in a form in which the data subject
concerned cannot or could not reasonably expect to be
identified.
(4)
Where data is not collected directly from the data subject concerned, the
data controller or any person acting on his behalf shall ensure that the
data subject is informed of the matters specified in subsection (2).
(5)
Subsection (3) shall not operate to prevent a second or subsequent
collection from becoming a first collection where the data controller has