Section 173 Alteration etc of personal data to prevent disclosure to data subjectI1

a request has been made in exercise of a data subject access right, and

the person making the request would have been entitled to receive information in response to that request.

Article 15 of the F1UK GDPR (right of access by the data subject);

Article 20 of the F2UK GDPR (right to data portability);

section 45 of this Act (law enforcement processing: right of access by the data subject);

section 94 of this Act (intelligence services processing: right of access by the data subject).

the controller, and

a person who is employed by the controller, an officer of the controller or subject to the direction of the controller.

the alteration, defacing, blocking, erasure, destruction or concealment of the information would have occurred in the absence of a request made in exercise of a data subject access right, or

the person acted in the reasonable belief that the person making the request was not entitled to receive the information in response to the request.