5.1.4. Collect, process and use data based on grounds specified in laws or with the consent of the data subject. 5.1.5. Ensure data security. 5.1.6. Ensure data accuracy and integrity. Chapter two Data collection, processing and use Article 6. Data Collection, Processing and Use of State Authorities 6.1. The state authority shall collect and process data on the following grounds: 6.1.1. With the consent of the data subject. 6.1.2. On the grounds specified by law. 6.1.3. Data controller to exercise the rights and fulfil the obligations in employment relations in cases provided by law. 6.1.4. Execute contracts and ensure the implementation of executed contracts. 6.1.5. Comply with obligations under international treaties to which Mongolia is a party. 6.1.6. Implement its legal functions without affecting the rights and legitimate interests of the data subject. 6.2. The state authority shall use data on the following grounds: 6.2.1. With the consents of the data subject. 6.2.2. On the grounds specified by law. 6.2.3. Prevent damage and harm to the life, body, rights, freedom, and property of the data subject, and protect its rights and legitimate interests. 6.2.4. Prevent damage and harm to the rights and legitimate interest of others. 6.2.5. Create historical, scientific, artistic, literary works and prepare statistical information by de-identifying a person. 6.3. The state authority shall follow the procedure set forth in Article 12 of the Law on Transparency of Public Information for the de-identification of the data subject in order to make the information available to the public. Article 7. Data Collection, Processing and Use by Person, Legal Entities and Non-Legal Entities 7.1. Individuals/person, legal entities, and non-legal entities other than state authorities shall collect, process, and use data on the following grounds: 7.1.1. On grounds specified in Sub-paragraphs 6.1.1, 6.1.2, 6.1.3, and 6.1.4 of this Law. 7.1.2. Disclosed to the public as specified in the Law. 7.1.3. Create historical, scientific, artistic, literary works and prepare statistical information by de-identifying a person. Article 8. Consent from Data Subject 8.1. The data controller shall seek a consent from the data subject for data processing, collection, and use, except as provided by law.