S11 Collection of personal information from data subject 10. Personal information shall be collected except where – (a) the information is contained in a public record or has deliberately been made public by the data subject; (b) the data subject has consented to the collection of the information from another source; (c) collection of the information from another source would not prejudice a legitimate interest of the data subject; (d) collection of the information from another source is necessary – (i) to avoid prejudice to the maintenance or enforcement of law and order; (ii) for the conduct of proceedings in any court or tribunal that have commenced or are reasonably contemplated; (iii) in the legitimate interests of national security; or (iv) to maintain the legitimate interests of the data controller or of a third party to whom the information is supplied; (e) compliance would prejudice a lawful purpose of the collection of the information; or (f) compliance is not reasonably practicable in the circumstances of the particular case. Collection of personal information by data controller 11. (1) Where personal information is collected by the data controller directly from the data subject, the data controller shall take reasonable and practicable steps to ensure that the data subject is aware of – (a) the information being collected; (b) the name and address of the data controller; (c) the purpose for which the information is being collected; (d) whether or not the supply of the information by the data subject is mandatory; (e) the consequences of failure to provide the information; (f) any law authorising or requiring the collection of the information; and (g) any further information which is necessary having regard to the specific circumstances, such as the – (i) recipient or category of recipients of the information;