5 Data Protection Act, 2018 - 5. ............................................... (b) for the taking of steps at the request of the data subject with a view to entering into a contract; (c) for compliance with any legal obligation to which the data user is the subject, other than an obligation imposed by a contract; (d) in order to protect the vital interests of the data subject; (e) for the administration of justice; or (f) for the exercise of any functions conferred on a person by or under any law. (3) Personal data shall not be processed unless– (a) the personal data is processed for a lawful purpose directly related to an activity of the data user; (b) the processing of the personal data is necessary for or directly related to that purpose; and (c) the personal data is adequate but not excessive in relation to that purpose. 8. Notice and Choice Principle. A data user shall inform a data subject upon a request for personal data– (a) the purposes for which the personal data is being or is to be collected and further processed; (b) of any information available to the data user as to the source of that personal data; (c) of the data subject’s right to request access to and to request correction of the personal data and how to contact the data user with any inquiries or complaints in respect of the personal data; (d) of the class of third parties to whom the data user discloses or may disclose the personal data; (e) whether it is obligatory or voluntary for the data subject to supply the personal data; and (f) where it is obligatory for the data subject to supply the personal data, the consequences for the data subject if he or she fails to supply the personal data. 9. Disclosure Principle. Subject to section 19, no personal data shall, without the consent of the data subject, be disclosed– (a) for any purpose other than– (i) the purpose for which the personal data was to be disclosed at the time of collection of the personal data; or (ii) a purpose directly related to the purpose referred to in subparagraph (i);