Personal Data Protection Act Article 15

Except for the personal data specified under paragraph 1 of Article 6, the collection or processing of personal data by government agencies shall be for specific purposes and on one of the following bases:1.where it is within the necessary scope to perform its statutory duties;2.where consent has been given by the data subject; or3.where the rights and interests of the data subject will not be infringed upon.