With great respect, it doesn't say that. It says they “shall set out the following” three things. That's the additional change.
The policy guidance, which may or may not be the case tomorrow or the day after or five years from now, may say something different. We're here to pass legislation, and those are three mandatory requirements, as plain as can be. They amend a section that simply says all you need to do is make a request “in writing” and let somebody who has control of the record and is an experienced person identify the record “with reasonable effort”. That's how it has been for some 30 years.
This is clearly a regressive step. It doesn't say “may”. It requires you to do the three things that are listed. Policy guidance comes and goes.