(g) any further information which is necessary having regard to the specific circumstances, such as the – i. recipient or category of recipients of the information; ii. nature or category of the information; and iii. existence of the right of access to and the right to recifty the information collected. (2) The steps referred to in subsection (1) shall be taken – (a) before the information is collected, unless the data subject is already aware of the information under subsection (1); or (b) in any other case, as soon as reasonably practicable after it has been collected. (3) A data controller which has previously taken the steps referred to in subsection (1) shall be in compliance with subsection (1) in relation to the subsequent collection from the data subject of the same information or information of the same kind if the purpose of collection of the information is unchanged. (4) A data controller may not comply with subsection (1) where – (a) the data subject has provided consent for the non-compliance; (b) non compliance would not prejudice the legitimate interests of the data subject as set out under this Act; (c) non compliance is necessary – i. to avoid prejudice to the maintenance or enforcement of law and order; ii. to enforce a law imposing a pecuniary penalty; iii. to enforce legislation concerning the collection of revenue by the state; iv. for the conduct of proceedings in any court or tribunal that have been commenced or are reasonably contemplated; or