An organisation may collect personal data about an individual from the individual themselves or from someone else – that is, from a third-party source.
Third-party sources differ depending on what business or other activities are carried out by an organisation, but here are some examples:
▪ Database resellers
If you Google “selling marketing lists”, for example, you’ll get a host of search results listing businesses advertising marketing lists, email addresses and other databases for sale. I looked at one sample list. I saw that for individuals ...