Section 4 of the Principal Act is amended -

(a) in subsection (1), by the substitution of the following paragraphs for paragraphs (a) and (b):

"(a) Subject to the provisions of this Act, an individual shall, if he or she so requests a data controller by notice in writing -

(i) be informed by the data controller whether the data processed by or on behalf of the data controller include personal data relating to the individual,

(ii) if it does, be supplied by the data controller with a description of -

(I) the categories of data being processed by or on behalf of the data controller,

(II) the personal data constituting the data of which that individual is the data subject,

(III) the purpose or purposes of the processing, and

(IV) the recipients or categories of recipients to whom the data are or may be disclosed,

(iii) have communicated to him or her in intelligible form -

(I) the information constituting any personal data of which that individual is the data subject, and