269 (a) (b) before the information is collected, unless the data subject is aheady aware of the information under subsec_ tion (1); or in any other case, as soon as reasonably practicable after. it has been collected, (3) A data contloller which has previously taken the steps referred to in subsection (1) shal1 be in compliance with subsection (1) in relation to the subsequent collection from the data subject of the same information or information of the same kind if the purpose of collection of the information is un_ changed. (4) A data controiler may not comply with subsection (1) where- (a) the data subject has provided consent for the non-com-pliance; (b) non-compliance would not prejudice the legitimate in_ terests of the data subject as set out under this Act; (c) non-compliance is necessa-ry - (i) (ii) (iii) (d) to avoid prejudice to the maintenance or forcement of the 1aw and order; en_ to enforce a 1aw imposing a pecuniary penalty; to enforce legislation concerning the collection of revenue by the state; (iv) for the conduct of pr-oceedings in any cour.t or tlibunal that have been commenced or are rea_ sonably contemplated; or (v) in the interests of national security; compliance would prejudice a lawful purpose of the co1_ lection;