[No. 6.] S.4 Data Protection (Amendment) Act 2003. [2003.] consequences of failure to give such replies and as to the existence of the right of access to and the right to rectify the data concerning him or her. (3) The information referred to in subsection (1)(b) of this section is: (a) the information specified in subsection (2) of this section, (b) the categories of data concerned, and (c) the name of the original data controller. (4) The said subsection (1)(b) does not apply— (a) where, in particular for processing for statistical purposes or for the purposes of historical or scientific research, the provision of the information specified therein proves impossible or would involve a disproportionate effort, or (b) in any case where the processing of the information contained or to be contained in the data by the data controller is necessary for compliance with a legal obligation to which the data controller is subject other than an obligation imposed by contract, if such conditions as may be specified in regulations made by the Minister after consultation with the Commissioner are complied with.’’. Amendment of section 4 (right of access) of Principal Act. 5.—Section 4 of the Principal Act is amended— (a) in subsection (1), by the substitution of the following paragraphs for paragraphs (a) and (b): ‘‘(a) Subject to the provisions of this Act, an individual shall, if he or she so requests a data controller by notice in writing— (i) be informed by the data controller whether the data processed by or on behalf of the data controller include personal data relating to the individual, (ii) if it does, be supplied by the data controller with a description of— (I) the categories of data being processed by or on behalf of the data controller, (II) the personal data constituting the data of which that individual is the data subject, 18