13(1)During the first transitional period, eligible automated data are exempt from the following provisions—
(a)the first data protection principle to the extent to which it requires compliance with—
(i)paragraph 2 of Part II of Schedule 1,
(ii)the conditions in Schedule 2, and
(iii)the conditions in Schedule 3,
(b)the seventh data protection principle to the extent to which it requires compliance with paragraph 12 of Part II of Schedule 1;
(c)the eighth data protection principle,
(d)in section 7(1), paragraphs (b), (c)(ii) and (d),
(e)sections 10 and 11,
(f)section 12, and
(g)section 13, except so far as relating to—
(i)any contravention of the fourth data protection principle,
(ii)any disclosure without the consent of the data controller,
(iii)loss or destruction of data without the consent of the data controller, or
(iv)processing for the special purposes.
(2)The specific exemptions conferred by sub-paragraph (1)(a), (c) and (e) do not limit the data controller’s general duty under the first data protection principle to ensure that processing is fair.