F3United Kingdom data protection legislation, as defined in section 3(9) of the Data Protection Act 2018 shall apply to the extent that the information processed through the F2appropriate computerised information management system contains personal data as defined in F4section 3(2) of the Data Protection Act 2018 and in point (a) of Article 2 of Regulation (EC) No 45/2001.

In relation to their responsibilities to transmit the relevant information to the F2appropriate computerised information management system and the processing of any personal data that might result from that activity, the competent authorities F5... shall be regarded as controllers as defined in F6section 1(1) of the Data Protection Act 1998 or section 3(6) of the Data Protection Act 2018, as the case may be.

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

The F9competent authority may restrict the rights and obligations under Article 4(1), Article 11, Article 12(1) and Articles 13 to 17 of Regulation (EC) No 45/2001 where such restriction constitutes a necessary measure to safeguard the interests referred to in points (a) and (e) of Article 20(1) of that Regulation during the period in which actions are being planned or performed to verify compliance with food or feed law or to ensure the enforcement of food or feed law in the specific case to which the information relates.