Notification of purpose
20.—(1) For the purposes of sections 14(1)(a) and 18(b), an organisation shall inform the individual of—
- (a) the purposes for the collection, use or disclosure of the personal data, as the case may be, on or before collecting the personal data;
- (b) any other purpose of the use or disclosure of the personal data of which the individual has not been informed under paragraph (a), before the use or disclosure of the personal data for that purpose; and
- (c) on request by the individual, the business contact information of a person who is able to answer on behalf of the organisation the individual’s questions about the collection, use or disclosure of the personal data.
(2) An organisation, on or before collecting personal data about an individual from another organisation without the consent of the individual, shall provide the other organisation with sufficient information regarding the purpose of the collection to allow that other organisation to determine whether the disclosure would be in accordance with this Act.
(3) Subsection (1) shall not apply if—
- (a) the individual is deemed to have consented to the collection, use or disclosure, as the case may be, under section 15; or
- (b) the organisation collects, uses or discloses the personal data without the consent of the individual in accordance with section 17.
(4) Notwithstanding subsection (3), an organisation, on or before collecting, using or disclosing the personal data about an individual for the purpose of managing or terminating an employment relationship between the organisation and that individual, shall inform the individual of—
- (a) that purpose; and
- (b) on request by the individual, the business contact information of a person who is able to answer the individual’s questions
