68. The rights and obligations provided for in the following Articles of the General Data Protection Regulation, in so far as those rights and obligations relate to the processing of personal data and special categories of personal data by a person under this Act, are restricted to the extent necessary and proportionate to enable the person to perform his or her functions under this Act:

(a) Article 12, insofar as any of its provisions correspond to the rights and obligations provided for in the Articles specified in paragraphs (b) to (d);

(b) Article 14;

(c) Article 18;

(d) Article 21.