67. (1) The Minister may prescribe suitable and specific measures, including measures specified in section 36(1) of the Data Protection Act 2018, to be taken to safeguard the fundamental rights and freedoms of data subjects in the processing of personal data, including special categories of personal data under this Act.

(2) Without prejudice to the generality of subsection (1), regulations under this section may prescribe suitable and specific measures to be taken in the provision under sections 16, 24 and 30 of medical information to a person.