262 which it is processed, it is adequate, relevant and not excessive. Collection directly frorn the data subject . (1) Apelson sha1l collect personal information dilectly fi'om the data subject, except where 17 (a) the information is contained in a public recold or has deliberately been made public by the data subject; (b) the data subject has consented to the collection of the information from anothsr source; (c) collection of the information from another source would not prejudice a legitimate interest of the data subject; (d) collection of the information from another source is necessary - (e) (i) to avoid prejudice to the maintenance or enforcement of the law and order; (ii) for the conduct of proceedings in any court or tribunal that have commenced or are reasonably contemplated; (iii) in the legitimate interests of national security; (iv) to maintain the iegitimate interests of the data controller or of a third palty to whom the information is supplied; or: compliance would prejudice a lawful pulpose of the col- lection; or (0 compliance is not reasonably practicable in the circumstances ofthe particular case.