The disclosure of personal data by a data controller is exempt from—
(a) the Second, Third, and Fourth Data Protection Principles;
(b) sections 34, 35, 40, 41, 42, 43 and 44; and
(c) Part 5 in respect of blocking personal data;
(d) if the disclosure of the personal data is —
(i) required under any enactment or by a Court order,
(ii) necessary for the purpose of, or in connection with, any on-going or prospective legal proceedings,
(iii) necessary for the purpose of obtaining legal advice, or
(iv) otherwise necessary for the purpose of establishing, exercising or defending legal rights.