An enactment or rule of law prohibiting or restricting the disclosure of information, or authorising the withholding of information, does not remove or restrict the obligations and rights provided for in the provisions listed in subsection (2) ....
The provisions providing obligations and rights are—
Chapter III of the UK GDPR (rights of the data subject),
Chapter 3 of Part 3 of this Act (law enforcement processing: rights of the data subject), and
Chapter 3 of Part 4 of this Act (intelligence services processing: rights of the data subject).
Subsection (1) does not apply—
to an enactment contained in, or made under, a provision listed in subsection (2),
to an enactment contained in, or made under, a provision listed in subsection (3),
to the extent that an enactment makes express provision to the contrary referring to this section or to a provision listed in subsection (2), or
to the extent that subsection (1) is disapplied by section 186A(3).
The provisions referred to in subsection (2A)(b) are—
in Chapter 2 of Part 2 of this Act, sections 15 and 16 and Schedules 2, 3 and 4,
in Chapter 3 of Part 2 of this Act, sections ... 24, 25 and 26,
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
in Part 3 of this Act, section 78A, and
in Part 4 of this Act, Chapter 6 .