[2003.] Data Protection (Amendment) Act 2003. [No. 6.] (III) the purpose or purposes of the processing, S.5 and (IV) the recipients or categories of recipients to whom the data are or may be disclosed, (iii) have communicated to him or her in intelligible form— (I) the information constituting any personal data of which that individual is the data subject, and (II) any information known or available to the data controller as to the source of those data unless the communication of that information is contrary to the public interest, and (iv) where the processing by automatic means of the data of which the individual is the data subject has constituted or is likely to constitute the sole basis for any decision significantly affecting him or her, be informed free of charge by the data controller of the logic involved in the processing, as soon as may be and in any event not more than 40 days after compliance by the individual with the provisions of this section and, where any of the information is expressed in terms that are not intelligible to the average person without explanation, the information shall be accompanied by an explanation of those terms. (b) A request under paragraph (a) of this subsection that does not relate to all of its subparagraphs shall, in the absence of any indication to the contrary, be treated as relating to all of them.’’, (b) by the insertion of the following subsection after subsection (4): ‘‘(4A) (a) Where personal data relating to a data subject consist of an expression of opinion about the data subject by another person, the data may be disclosed to the data subject without obtaining the consent of that person to the disclosure. (b) Paragraph (a) of this subsection does not apply— (i) to personal data held by or on behalf of the person in charge of an institution referred to in section 5(1)(c) of this Act and consisting of an expression of opinion by another person about the data subject if the data subject is being or was detained in such an institution, or 19