ons of section 7 of that Act by virtue of the Data Protection (Miscellaneous Subject Access Exemptions) Order 2000 (as amended by article 2 of the Adoption and Children Act 2002 (Consequential Amendments) Order 2005). This means that the person who is the subject of the record does not have the right to insist on seeing all the records that the data controller holds about them. Nevertheless, in most cases it will be appropriate for the agency to exercise its discretion under regulation 15 of the 1983 Regulations to disclose to the adopted person information that it holds about him. Where it is a question of the possible disclosure of ‘third party’ information, such as identifying information about members of the birth family or former foster carers, the agency must act in accordance with the principles of the Data Protection Act. Although the starting point for disclosure of third party information is that it should only be disclosed with 188 the consent of the person to whom it relates, information about a third party must be disclosed if “it is reasonable in all the circumstances” to do this without their consent; see section 7(4) of the Data Protection Act. A similar approach is likely to be helpful in deciding how to apply the Data Protection Principles to disclosure of adoption information. It will be necessary to consider the impact that disclosure will have on the third party and weigh this against the impact that non-disclosure will have on the person seeking information. The agency in exercising its discretion will need to take account of the context and all the circumstances; see the case of Gunn-Russo v Nugent Care Society [2001] EWHC Admin 566. It is important that the reasoning behind any decision as to disclosure be fully recorded. 10.11. Under Schedule 2 