iii. assign responsibilities, raise awareness and train members of staff involved in processing operations; iv. advice on data protection impact assessment and monitor its performance; and v. liaise with NITDA and/or the DPCO on data protection matters. 4. HANDLING PERSONAL DATA 4.1 Further Processing Art. 3.1(7)m 4.1.1 According to Article 3.1(7)m: Where the Controller intends to further process the Personal Data for a purpose other than that for which the Personal Data were collected, the controller shall provide the Data Subject prior to that further processing with information on that other purpose, and with any relevant further information. Where a Data Controller wishes to further process Personal Data initially collected for a defined or limited purpose, the Data Controller shall consider the following: a) whether there exists a connection between the original purpose and the proposed purpose; b) the context in which the data was originally collected; c) the nature of the Personal Data; d) the possible impact of the new processing on the data subject; and e) 4.1.2 the existence of requisite safeguards for the Personal Data. The above information shall be provided to the Data Subject before further processing is done. The further processing may be done if: a) the Data Subject gives consent based on the new information; 10 | P a g e