Act Data Prote ction And Pri vacy Act 2019 (4) Where the data controller complies with the request , the data controller shall inform each person to whom the personal data has been disclosed of the conection made. (5) The data controller shall notify the data subject of the action taken as a result of the request. 17. Further processing to be compatible with purpose of collection. (1) Where a person holds personal data collected in connection with a specific purpose, further processing of the personal data shall only be for that specific purpose . (2) For the purposes of subsection (1), a person who processes personal data under this section shall take into account(a) the relationship between the purpose of the intended further processmg and the purpose for which the data was collected ; (b) the nature of the data concerned; (c) the manner in which the data has been collected; (d) the consequences that the further processing is likely to have for the data subject; and (e) the contractual rights and obligations between the data subject and the person who processes the data . (3) The further processing of data is considered to be compatible with the purpose of collection where(a) the data subject consents to the further processing of the information ; (b) the data is publicly available or has been made public by the person concerned ;