body: When making a Subject Access Request to GCHQ I was told that I would have to pay a fee for this Request. The GDPR does not allow for such a fee, while the UK Data Protection Act does(Part 4 – Chapter 3 - Section 94). My Subject Access Request concerns the website of the GCHQ, and not the GCHQ's surveillance activities. Does the GDPR supersede the UK Data Protection Act in this case?
  
  
  
title: Fee for Subject Access Request to GCHQ, Data Protection Act 2018