316 The Data Protection Bill, 2018 for the prevention, detection, investigation, prosecution and punishment of crime; for the protection of the interests of the data subject or another person; (iii)to comply with an obligation imposed by law; or (iv) in the interest of national security; or (f) compliance is not reasonably practical in the circumstances of the case. (3) An agency shall collect, store or use personal datausing lawful means; or using means that, in the circumstances, do not intrude to an unreasonable extent, upon the personal affairs of the data subject except in accordance with this Act or any other written law. 8. An agency that collects orprocesses personal data shall ensure that the data is complete, accurate, up-todate and not misleading having regard to the purpose for the collection or processing of the personal data. 9. A data subject has a right to be informed by the agency of the use to which the data is to be put; access the data with respect to the data subject which is in possession of an agency; object to the collection or processing of all or part of data by an agency; correction of false or misleading data; deletion of misleading, false or data which has been objected to; and an explanation in respect of the processing of data and the outcome of such processing; 10. (1) Before an agency collects personal data directly from a data subject, the agency shall in so far as is reasonably practicable, inform the data subject the fact that the information is being collected; the purpose for which the information is being collected and specify the use to which such information shall be put; 9iatY of information. Rights of a data subject. Duty. to notify.