Personal Data Protection
19
(e) of the class of third parties to whom the data user discloses
or may disclose the personal data;
(f) of the choices and means the data user offers the data
subject for limiting the processing of personal data,
including personal data relating to other persons who
may be identified from that personal data;
(g) whether it is obligatory or voluntary for the data subject
to supply the personal data; and
(h) where it is obligatory for the data subject to supply the
personal data, the consequences for the data subject if
he fails to supply the personal data.
(2) The notice under subsection (1) shall be given as soon as
practicable by the data user—
(a) when the data subject is first asked by the data user to
provide his personal data;
(b) when the data user first collects the personal data of the
data subject; or
(c) in any other case, before the data user—
(i) uses the personal data of the data subject for a
purpose other than the purpose for which the
personal data was collected; or
(ii) discloses the personal data to a third party.
(3) A notice under subsection (1) shall be in the national and
English languages, and the individual shall be provided with a
clear and readily accessible means to exercise his choice, where
necessary, in the national and English languages.
Disclosure Principle
8. Subject to section 39, no personal data shall, without the
consent of the data subject, be disclosed—
(a) for any purpose other than—
(i) the purpose for which the personal data was to be
disclosed at the time of collection of the personal
data; or
(ii) a purpose directly related to the purpose referred
to in subparagraph (i); or