Personal Data Protection Act, No. 9 of 2022 58 (Section 5 (d)) SCHEDULE IV PROCESSING OF PERSONAL DATA RELATING TO CRIMINAL INVESTIGATIONS (a) processing of personal data relating to lawful investigations of offences or related security measures shall be carried out only in accordance with applicable written laws, whilst providing for appropriate safeguards for the rights and freedoms of data subjects; (b) for the avoidance of doubt, processing of personal data may be considered lawful under this Schedule if investigations are carried out pursuant to the provisions of the Code of Criminal Procedure Act, No. 15 of 1979 or provisions under any other written law; and (c) conditions for providing appropriate safeguards for the rights and freedoms of data subjects under this Schedule may be as prescribed. (Sections 11 and 13) SCHEDULE V COLLECTION OF PERSONAL DATA 1. where the personal data relating to a data subject is collected from the data subject, the controller shall provide the data subject with the following information, at the time of collection of such personal data (a) the identity and contact details of the controller and where applicable of the controller’s representative; (b) the contact details of the Data Protection Officer, where applicable; (c) the intended purposes for which the personal data is processed and the legal basis for the processing; (d) the legitimate interest pursued by the controller or by a third party where processing is based on item (f) of Schedule 1; (e) the categories of personal data being collected; (f) where processing is intended to be based on consent pursuant to item (a) of Schedule I and item (a) of Schedule