18. Data protection
The following section is inserted after section 16A (inserted by section 17) but in Part 3 of the Principal Act:
"16B.
(a) The rights and obligations provided for in Articles 12 to 22 and Article 34, and Article 5 in so far as any of its provisions correspond to the rights and obligations in Articles 12 to 22, of the General Data Protection Regulation, and in Directive (EU) 2016/680 of the European Parliament and of the Council of 27 April 2016 [OJ No. L 119, 4.5.2016, p. 89.], are restricted in respect of relevant data -
(i) to the extent necessary and proportionate for the purposes of -
(I) safeguarding the important objectives of general public interest, and
(II) the protection of the data subject or the rights and freedoms of others,
and
(ii) to the extent, and as long as, necessary to prevent and address attempts to hinder reporting or to impede, frustrate or slow down follow-up, in particular investigations, or attempts to find out the identity of reporting persons.
(b) The important objectives of general public interest referred to in paragraph (a) are -
(i) those referred to in section 60(7) of the Data Protection Act 2018, and