Data Protection And Privacy Act Act (c) 2019 the collection or processing of the information is for the purposes of the legitimate activities of a body or association which(i) is established for non-profit purposes; or (ii) exists for political, philosophical, religious or trade union purposes; and (iii) relates to individuals who are members of the body or association or have regular contact with the body or association in connection with its purposes, and does not involve disclosure of the personal data to a third party without the consent of the data subject. 10. Protection of privacy. A data collector, data processor or data controller shall not collect, hold or process personal data in a manner which infringes on the privacy of a data subject. 11. Collection of data from data subject. (1) A person shall collect personal data directly from the data subject. (2) Notwithstanding subsection (1), personal data may be collected from another person, source or public body where(a) the data is contained in a public record; (b) the data subject has deliberately made the data public ; (c) the data subject has consented to the collection of the information from another source; (d) the collection of the data from another source is not like! y to prejudice the privacy of the data subject;