The Data Protection Bill, 2018
317
the intended recipient of the information;
the name and address of the agency that is
collecting the information, the agency that will
hold the information and whether or not any other
agency will receive the information;
where the information is collected pursuant to any
lawthe law requiring or authorising the collection
of the information;
the procedure required to be undertaken in
order to comply with the law; and
(iii)whether the supply of the information by that
data subject is voluntary or mandatory;
the consequences if any, where the data subject
fails to provide all or any part of the requested
information; and
the right of access to, and correction of, personal
data provided under section 13 and 15 of this Act.
An agency shall not collect personal data from a
data subject unless it has taken the steps specified in
subsection (1).
Despite subsection (2), whereit is not practicable for an agency to comply with
subsection (1) before collecting information; or
the whereabouts of the data subject are not known,
the agency shall, as soon as practicable after the
information is collected, comply with the
provisions of subsection (1).
11. (1) An agency shall not be required to take the
steps specified under section 10 if that agency has, prior to
collecting the information, taken those steps in the recent
past when collecting the same information or information
of the same kind from that data subject.
(2) Where an agency collects information under
subsection (1) to be used for a different purpose from the
one for which the information was first collected or where
the circumstances of the data subject has changed, the
agency shall notify the data subject of the use to which the
information shall be put to.
When agency may
no ify.