Union or Member State law to which the data controller or processor is subject may restrict by way of a legislative measure the scope of the obligations and rights provided for in  Articles 12  to  22  and  Article 34 , as well as  Article 5  in so far...

In particular, any legislative measure referred to in paragraph 1 shall contain specific provisions at least, where relevant, as to: (a) The purposes of the processing or categories of processing; (b) The categories of personal data; (c) The...