The second principle
5The purpose or purposes for which personal data are obtained may in particular be specified—
(a)in a notice given for the purposes of paragraph 2 by the data controller to the data subject, or
(b)in a notification given to the Commissioner under Part III of this Act.
6In determining whether any disclosure of personal data is compatible with the purpose or purposes for which the data were obtained, regard is to be had to the purpose or purposes for which the personal data are intended to be processed by any person to whom they are disclosed.