Personal Data (Privacy) Ordinance Schedule 1 S1-2 Section 1 Cap. 486 Schedule 1 [ss. 2(1) & (6)] Data Protection Principles 1. Principle 1—purpose and manner of collection of personal data (1) Personal data shall not be collected unless— (a) the data is collected for a lawful purpose directly related to a function or activity of the data user who is to use the data; (b) subject to paragraph (c), the collection of the data is necessary for or directly related to that purpose; and (c) the data is adequate but not excessive in relation to that purpose. (2) Personal data shall be collected by means which are— (a) lawful; and (b) fair in the circumstances of the case. (3) Where the person from whom personal data is or is to be collected is the data subject, all practicable steps shall be taken to ensure that—  (Amended 18 of 2012 s. 40) (a) he is explicitly or implicitly informed, on or before collecting the data, of— (i) whether it is obligatory or voluntary for him to supply the data; and (ii) where it is obligatory for him to supply the data, the consequences for him if he fails to supply the data; and (b) he is explicitly informed— Verified Copy Last updated date 20.4.2018