# Freedom of Information Act 2000, Paragraph 1


In section 7 of the Data Protection Act 1998 (right of access to personal data), for subsection (3) there is substituted—
“(3) Where a data controller—
(a) reasonably requires further information in order to satisfy himself as to the identity of the person making a request under this section and to locate the information which that person seeks, and
(b) has informed him of that requirement,
the data controller is not obliged to comply with the request unless he is supplied with that further information.”

---
Source: https://www.legislation.gov.uk/ukpga/2000/36/schedule/6/paragraph/1 (the official version)
Page: https://openlegislation.uk/freedom-of-information-act-2000/schedule-6/paragraph-1
Contains public sector information licensed under the Open Government Licence v3.0. Source: legislation.gov.uk, The National Archives.