Commissioner; (j) where applicable, that the controller intends to transfer personal data to another country and on the level of suitable protection afforded by that country; and (k) any further information necessary to guarantee fair processing in respect of the data subject’s personal data, having regard to the specific circumstances in which the data are collected. (3) A controller shall not be required to comply with subsection (2) where – (a) the data subject already has the information referred to in subsections (1) and (2); or (b) the data are not collected from the data subject and – (i) the provision of such information proves impossible or would disproportionate effort; or involve a