Part 3: Law enforcement processing Chapter 3: Rights of the data subject Section 44: Information: controller’s general duties
This section imposes general duties on controllers in respect of the provision of information. Subsection (1) sets out a minimum list of information that must be available to data subjects. Such generic information may be provided through a controller’s website or supporting literature. The Commissioner has published a code of practice on communicating privacy information to individuals.
	Subsection (2) sets out additional information which a controller must provide "in specific cases" to a data subject to enable the data subject to exercise his or her subject access rights. An example of such a case could be where the personal data is collected without the data subject being aware and to inform the data subject would not, for example, prejudice an on-going investigation.
	The right to the information specified in subsection (2) is a qualified right. Subsection (4) sets out various grounds on which a controller may restrict the provision of information under subsection (2). This recognises, for example, that the disclosure of such information could compromise an ongoing police investigation or compromise sensitive operational techniques or capabilities.