No. 136 Chapter 69 Gor Government Gazette 27 May 2019 (6) the rights of the data subject under Section 19 paragraph five, Section 30 paragraph one, Section 31 paragraph one, Section 32 paragraph one, Section 33 paragraph one, Section 34 paragraph one, Section 36 paragraph one, and Section 73 paragraph one. Section 24 The Data Controller shall not collect Personal Data without the consent of the data subject, unless: (1) it is for the achievement of the purpose relating to the preparation of the historical documents or the archives for public interest, or for the purpose relating to research or statistics, in which the suitable measures to safeguard the data subject's rights and freedoms are put in place and in accordance with the notification as prescribed by the Committee; (2) it is for preventing or suppressing a danger to a Person’s life, body or health; (3) it is necessary for the performance of a contract to which the data subject is a party, or in order to take steps at the request of the data subject prior to entering into a contract; (4) it is necessary for the performance of a task carried out in the public interest by the Data Controller, or it is necessary for the exercising of official authority vested in the Data Controller; (5) it is necessary for legitimate interests of the Data Controller or any other Persons or juristic persons other than the Data Controller, except where such interests are overridden by the fundamental rights of the data subject of his or her Personal Data; or (6) it is necessary for compliance with a law to which the Data Controller is subjected. Section 25 The Data Controller shall not collect Personal Data from any other source, apart from the data subject directly, except where: (1) the Data Controller has informed the data subject of the collection of Personal Data from other source without delay, but shall not exceed thirty days upon the date of such collection, and has obtained the consent from the data subject; or (2) it is a collection of Personal Data which falls within the exceptions to request consent under section 24 or Section 26. The provisions with respect to notice of the new purpose in Section 21, and the notice of information details in Section 23 shall apply mutatis mutandis to the collection of the Personal Data which requires consent in paragraph one, except for the following circumstances: (1) the data subject has been aware of such new purposes or details; (2) the Data Controller can prove that the notice of such new purposes or information details is impossible or will obstruct the use or disclosure of the Personal Data, in 11