Act
Data Prote ction And Pri vacy Act
2019
(4) Where the data controller complies with the request , the data
controller shall inform each person to whom the personal data has
been disclosed of the conection made.
(5) The data controller shall notify the data subject of the action
taken as a result of the request.
17. Further processing to be compatible with purpose of
collection.
(1) Where a person holds personal data collected in connection
with a specific purpose, further processing of the personal data shall
only be for that specific purpose .
(2) For the purposes of subsection (1), a person who processes
personal data under this section shall take into account(a) the relationship between the purpose of the intended further
processmg and the purpose for which the data was
collected ;
(b) the nature of the data concerned;
(c) the manner in which the data has been collected;
(d) the consequences that the further processing is likely to
have for the data subject; and
(e) the contractual rights and obligations between the data
subject and the person who processes the data .
(3) The further processing of data is considered to be compatible
with the purpose of collection where(a)
the data subject consents to the further processing of the
information ;
(b) the data is publicly available or has been made public by
the person concerned ;