purpose; and (b) comply with the law. (2) In the cases referred to under subsection (1), personal information shall not be supplied to third parties without the consent of the data subject. Exemption on data subject’s trade union membership 32 (1) The prohibition on processing personal information on a data subject’s trade union membership, shall not apply to the processing by the trade union to which the data subject belongs or the trade union federation to which that trade union belongs, where the processing is necessary to achieve the aims of the trade union or trade union federation. (2) In the cases referred to under subsection (1), personal information shall not be supplied to third parties without the consent of the data subject. Exemption of data subject’s political affiliation 33 (1) The prohibition on processing personal information concerning a data subject’s political affiliation, shall not apply to processing by an institution founded on political principles of the personal information of their members or employees or other personal belonging to the institution, if such processing is necessary to achieve the aims or principles of the institution. (2) In the cases under subsection (1), personal information shall not be supplied to third parties without the consent of the data subject.