data processors are also required to share a copy of the requested data in the stipulated timeframe, as prescribed by the Commission. CHAPTER VII EXEMPTIONS 33. Repeated collection of personal data– (1) where a data controller— (a) has complied with the requirements of this Act concerning the collection of personal data from the data subject, referred to as the “first collection”; and on any subsequent occasion again requests to collect personal data from the same data subject, referred to as the “subsequent collection” the data controller shall not be required to comply with the requirements of section 8 in respect of the subsequent collection if— (i) to comply with those provisions in respect of that subsequent collection means to repeat in the same circumstances what was done to comply with that principle in respect of the first collection; and (ii) not more than twelve months have elapsed between the first collection and the subsequent collection. (2) It is asserted that sub-section (1) shall not be exercised to prevent a subsequent collection from becoming the first collection if the concerned data controller has complied with the provisions of the notice and consent concerning the subsequent collection. 34. Exemption. – (1) The personal data processed by an individual only for that individual’s personal, family, or household affairs, including recreational purposes, shall be exempted from the provisions of this Act. (2) Subject to section 15 exemptions may be granted provided personal data is: (a) processed for – (i) the prevention, detection, investigation, or prosecution of any criminal offence; (ii) the apprehension or prosecution of offenders; (iii) the enforcement of any legal right or claim; (iv) the enforcement of any decree of court, tribunal, or for the performance of a 30