(1) Where the data controller is a credit reference agency, section 7 has effect subject to the provisions of this section.
(2) An individual making a request under section 7 may limit his request to personal data relevant to his financial standing, and shall be taken to have so limited his request unless the request shows a contrary intention.
(3) Where the data controller receives a request under section 7 in a case where personal data of which the individual making the request is the data subject are being processed by or on behalf of the data controller, the obligation to supply information under that section includes an obligation to give the individual making the request a statement, in such form as may be prescribed by the Secretary of State by regulations, of the individual's rights -
(a) under section 159 of the Consumer Credit Act 1974 [1974 c. 39.], and
(b) to the extent required by the prescribed form, under this Act.