263 Furpose specification and further processing limitation 18. (1) Personal data shall be collected for specified, explicit and legitimate purposes and shal1 not be fulthel processed in a way incompatible with those purposes. (2) The further plocessing of personal information sharl be compatible with the purposes of collection if (a) the data subject has consented to tlie further processing of the information: (b) the information is available in a public record or has deIiberately been made public by the data subject; (c) further plocessing is necessary - (i) to avoid prejudice to the maintenance of the law or enforcement of the law and order; (ii) for the conduct ofproceedings in any court or tribunal that have commenced or are reasonably contemplated; or (iii) (d) the further processing of the information is necessary to plevent or mitigate a serious and imminent threat to- (i) (ii) (e) in the legitimate interests of national security; public health and safety; or the life or health of the data subject or another individual; or the information is used for historical, statistical or research purposes and the data controller has established applopliate safeguards against the personal data being used for any other pulposes.