"A monitoring, inspection or regulatory function connected, even occasionally, with the exercise of official authority . . . "(g) The protection of the data subject or of the rights and freedoms of others . . . "
"Where a data controller can not comply with a request without disclosing information relating to another individual who can be identified from that information, he is not obliged to comply with the request unless (a) the other individual has consented to the disclosure of the information to the person making the request, or (b) it is reasonable in all circumstances to comply with the request without the consent of the other individuals."
"Personal data consisting of information recorded by candidates during an academic, professional, or other examination are exempt from section 7."