12 (1) An organization may collect personal information about an individual without consent or from a source other than the individual, if (a) the collection is clearly in the interests of the individual and consent cannot be obtained in a timely way,