(5)
A data controller shall not comply with a request under section 41 where
–
(a)
he is being requested to disclose information given or to be given
in confidence for the purposes of (i)
the education, training or employment, or prospective
education, training or employment, of the data subject;
(ii)
the appointment, or prospective appointment, of the data
subject to any office; or
(iii)
the provision, or prospective provision, by the data subject
of any service;
(b)
the personal data requested consist of information recorded by
candidates
during
an
academic,
professional
or
other
examination;
(c)
such compliance would, by revealing evidence of the commission
of any offence other than an offence under this Act, expose him to
proceedings for that offence.
44.
Inaccurate personal data
(1)
A data controller shall, upon being informed as to the
inaccurateness of personal data, by a data subject to whom such data
pertains, cause such data to be rectified, blocked, erased or destroyed,
as appropriate.
(2)
Where a data controller is aware that a third party holds
inaccurate personal data, he shall, as soon as reasonably practicable,
require the third party to rectify, block, erase or destroy the data, as
appropriate.
(3)
Where the third party specified in subsection (2) fails to comply with the
requirement under that subsection, he shall commit an offence.