Page:Personal Data Protection Act 2012.pdf/63

---

---

THIRD SCHEDULE—continued

paragraph 1(j) notwithstanding that section 17(1) was not in force at the time of the collection.

FOURTH SCHEDULE

Sections 2, 17(3) and 21(4)

DISCLOSURE OF PERSONAL DATA WITHOUT CONSENT

1. An organisation may disclose personal data about an individual without the consent of the individual in any of the following circumstances:

(a) the disclosure is necessary for any purpose which is clearly in the interests of the individual, if consent for its disclosure cannot be obtained in a timely way;

(b) the disclosure is necessary to respond to an emergency that threatens the life, health or safety of the individual or another individual;

(c) subject to the conditions in paragraph 2, there are reasonable grounds to believe that the health or safety of the individual or another individual will be seriously affected and consent for the disclosure of the data cannot be obtained in a timely way;

(d) the personal data is publicly available;

(e) the disclosure is necessary in the national interest;

(f) the disclosure is necessary for any investigation or proceedings;

(g) the disclosure is to a public agency and such disclosure is necessary in the public interest;

(h) the disclosure is necessary for evaluative purposes;

(i) the disclosure is necessary for the organisation to recover a debt owed by the individual to the organisation or for the organisation to pay to the individual a debt owed by the organisation;

(j) the disclosure is necessary for the provision of legal services by the organisation to another person or for the organisation to obtain legal services;

(k) the personal data is disclosed by a member of a credit bureau to the credit bureau for the purpose of preparing credit reports, or in a credit report provided by a credit bureau to a member of the credit bureau in relation to a transaction between the member and the individual;

(l) the personal data about the current or former students of the organisation, being an education institution, is disclosed to a public agency for the purposes of policy formulation or review;