Personal data should not be disclosed, made available, or otherwise used for purposes other than specified with which of the following exceptions?…

Personal data is any information that relates to an identified or identifiable individual, such as name,

address, email, phone number, or biometric data. Personal data should not be disclosed, made

available, or otherwise used for purposes other than specified, except with:

The consent of the person it is collected from: Consent is a clear and voluntary indication of

agreement by the person to the processing of their personal data for a specific purpose. Consent can

be given by a statement or a clear affirmative action, such as ticking a box or clicking a button.

The authority of law: The authority of law is a legal basis or obligation that requires or permits the

processing of personal data for a legitimate purpose. For example, the authority of law could be a

court order, a subpoena, a warrant, or a statute.