that have commenced or are reasonably contemplated, or
(v) for the protection of national security;
(d) the further processing of the data is necessary to prevent or
mitigate a serious and imminent threat to
(i) public health or safety, or
(ii) the life or health of the data subject or another individual;
(e) the data is used for historical, statistical or research purposes and
the person responsible for the processing ensures that
(i) the further processing is carried out solely for the
purpose for which the data was collected, and
(ii) the data is not published in a form likely to reveal the
identity of the data subject; or
(f) the further processing of the data is in accordance with this
Act.
Quality of information
26. A data controller who processes personal data shall ensure that the
data is complete, accurate, up to date and not misleading having regard to the
purpose for the collection or processing of the personal data.
Registration of data controller
27. (1) A data controller who intends to process personal data shall
register with the Commission.
(2) A data controller who intends to collect personal data shall ensure
that the data subject is aware of
(a) the nature of the data being collected;
(b) the name and address of the person responsible for the
collection;
(c) the purpose for which the data is required for collection;
(d) whether or not the supply of the data by the data subject is
discretionary or mandatory;
(e) the consequences of failure to provide the data;
(f) the authorised requirement for the collection of the information or the requirement by law for its collection;
(g) the recipients of the data;
(h) the nature or category of the data; and
(i) the existence of the right of access to and the right to request
rectification of the data collected before the collection.
(3) Where the data is collected from a third party, the data subject shall
be given the information specified in subsection (2) before the col- lection of
the data or as soon as practicable after the collection of the data.
(4) Subsection (2), shall not apply in the following situations where it is
necessary:
(a) to avoid the compromise of the law enforcement power of a
public body responsible for the prevention, detection, investigation,
prosecution or punishment of an offence;
(b) for the enforcement of a law which imposes a pecuniary penalty;
(c) for the enforcement of legislation which concerns revenue