§ 13 — Consent required

13. An organisation must not, on or after 2 July 2014, collect, use or disclose personal data about an individual unless —(a)

the individual gives, or is deemed to have given, his or her consent under this Act to the collection, use or disclosure, as the case may be; or

(b)

the collection, use or disclosure (as the case may be) without the individual’s consent is required or authorised under this Act or any other written law.