3.—(1) The disclosure of personal data—
(a)is in the substantial public interest;
(b)is in connection with—
(i)the commission by any person of any unlawful act (whether alleged or established),
(ii)dishonesty, malpractice, or other seriously improper conduct by, or the unfitness or incompetence of, any person (whether alleged or established), or
(iii)mismanagement in the administration of, or failures in services provided by, any body or association (whether alleged or established);
(c)is for the special purposes as defined in section 3 of the Act; and
(d)is made with a view to the publication of those data by any person and the data controller reasonably believes that such publication would be in the public interest.
(2) In this paragraph, “act” includes a failure to act.