Article 6(1) (Lawfulness of processing) (see too recitals 40–49); Article 6(4) (Exceptions to the requirement of compatible purposes for further processing and criteria to ascertain whether a purpose of further processing is compatible with the purpose for which the personal data are initially collected) (see too recital 50); Article 12 (Transparent information) (see too recitals 58–59); Articles 13–15 (Information and access to personal data) (see also recitals 60–64); Article 24 (Responsibility of the controller) (see too recitals 74–78) ; Article 32 (Security of processing) (see too recital 83); Article 89(1) (Safeguards and derogations relating to processing for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes) (see too recitals 158–163).