(5) A data controller shall not comply with a request under section 41 where – (a) he is being requested to disclose information given or to be given in confidence for the purposes of (i) the education, training or employment, or prospective education, training or employment, of the data subject; (ii) the appointment, or prospective appointment, of the data subject to any office; or (iii) the provision, or prospective provision, by the data subject of any service; (b) the personal data requested consist of information recorded by candidates during an academic, professional or other examination; (c) such compliance would, by revealing evidence of the commission of any offence other than an offence under this Act, expose him to proceedings for that offence. 44. Inaccurate personal data (1) A data controller shall, upon being informed as to the inaccurateness of personal data, by a data subject to whom such data pertains, cause such data to be rectified, blocked, erased or destroyed, as appropriate. (2) Where a data controller is aware that a third party holds inaccurate personal data, he shall, as soon as reasonably practicable, require the third party to rectify, block, erase or destroy the data, as appropriate. (3) Where the third party specified in subsection (2) fails to comply with the requirement under that subsection, he shall commit an offence.