Data Protection And Privacy Act
Act
(c)
2019
the collection or processing of the information is for the
purposes of the legitimate activities of a body or
association which(i)
is established for non-profit purposes; or
(ii) exists for political, philosophical, religious or trade
union purposes; and
(iii) relates to individuals who are members of the body or
association or have regular contact with the body or
association in connection with its purposes, and does
not involve disclosure of the personal data to a third
party without the consent of the data subject.
10. Protection of privacy.
A data collector, data processor or data controller shall not collect,
hold or process personal data in a manner which infringes on the
privacy of a data subject.
11. Collection of data from data subject.
(1) A person shall collect personal data directly from the data
subject.
(2) Notwithstanding subsection (1), personal data may be
collected from another person, source or public body where(a) the data is contained in a public record;
(b) the data subject has deliberately made the data public ;
(c) the data subject has consented to the collection of the
information from another source;
(d) the collection of the data from another source is not like! y
to prejudice the privacy of the data subject;