The Minister may for the purposes of this Act prescribe:

(a) the types and forms of processing which may be carried out;

(b) the personal data that may be processed;

(c) the circumstances in which the personal data may be processed, including specifying the persons to whom the data may be disclosed;

(d) suitable and specific measures, including measures set out in section 36(1) of the Act of 2018, to safeguard the fundamental rights and freedoms of data subjects in the processing of personal data, including special categories of personal data under this Act;

(e) where the processing involves data relating to the health of a data subject, additional measures to be taken to safeguard the processing of that data;

(f) the period of time during which personal data or special categories of personal data may be processed;

(g) where possible, the proposed time limit within which each category of personal data shall be erased.