(1)An enactment or rule of law prohibiting or restricting the disclosure of information, or authorising the withholding of information, does not remove or restrict the obligations and rights provided for in the provisions listed in subsection (2), except as provided by or under the provisions listed in subsection (3).
(2)The provisions providing obligations and rights are—
(a)Chapter III of the GDPR (rights of the data subject),
(b)Chapter 3 of Part 3 of this Act (law enforcement processing: rights of the data subject), and
(c)Chapter 3 of Part 4 of this Act (intelligence services processing: rights of the data subject).
(3)The provisions providing exceptions are—
(a)in Chapter 2 of Part 2 of this Act, sections 15 and 16 and Schedules 2, 3 and 4,
(b)in Chapter 3 of Part 2 of this Act, sections 23, 24, 25 and 26,
(c)in Part 3 of this Act, sections 44(4), 45(4) and 48(3), and
(d)in Part 4 of this Act, Chapter 6 .