See also Recital 50. See also Article 6(4) GDPR, referring to Article 23(1) GDPR, but also allowing, however, national or Union law’s exceptions to the rights of data subjects, including in case of data breach, and Article 5 GDPR (including the purpose limitation principle).