(c) in subsection (7)(a), after “subsection (2)” insert “in reliance on subsection (4)” .
(4) In section 45 (right of access by the data subject)—
(c) in subsection (7)(a), after “subsection (1)” insert “in reliance on subsection (4)” .
(5) In section 48 (requests by data subject for rectification or erasure of personal data)—
(a) in subsection (3), omit paragraph (d) (grounds for restricting information provided: national security),
(b) in subsection (4)—
(i) for “(1)” substitute “(1)(b)(i)” , and
(ii) after “restricted” insert “under subsection (3)” , and
(c) in subsection (6)(a), after “subsection (1)(b)(i)” insert “in reliance on subsection (3)” .
(6) In section 68(7) (communication of a personal data breach to the data subject: grounds for restricting information provided), omit paragraph (d) (national security).
(7) In Chapter 6 of Part 3 (law enforcement processing: supplementary), before section 79 insert—
“ 78A National security exemption
(1) A provision mentioned in subsection (2) does not apply to personal data processed for law enforcement purposes if exemption from the provision is required for the purposes of safeguarding national security.
(2) The provisions are—
(a) Chapter 2 of this Part (principles), except for the provisions listed in subsection (3);
(b) Chapter 3 of this Part (rights of the data subject);
(c) in Chapter 4 of this Part—
(i) section 67 (notification of personal data breach to the Commissioner);
(ii) section 68 (communication of personal data breach to the data subject);
(d) Chapter 5 of this Part (transfers of personal data to third countries etc), except for the provisions listed in subsection (4);
(e) in Part 5—
(i) section 119 (inspection in accordance with international obligations);
(ii) in Schedule 13 (other general functions of the Commissioner), paragraphs 1(1)(a) and (g) and 2;
(f) in Part 6—
(i) sections 142 to 154 and Schedule 15 (Commissioner’s notices and powers of entry and inspection);
(ii) sections 170 to 173 (offences relating to personal data);