(73) Restrictions may be provided in Union or Member State law on certain principles and on the right to information, access to and rectification or erasure of personal data, the right to data portability, the right to object, decisions based on profiling, notification of a personal data breach to the data subject, and certain related obligations of controllers, insofar as necessary and proportionate in a democratic society to ensure public security, including the protection of human life - in particular in response to natural or man-made disasters - the prevention of crime, the investigation of criminal offenses, the prosecution of criminal offenses, or the execution of penalties, including the protection against and prevention of threats to public safety, or the prevention of breaches of ethics in the regulated professions, the protection of other important objectives of general public interest of the Union or a Member State, in particular an important economic or financial interest of the Union or a Member State, the maintenance of public records for reasons of general public interest, the further processing of archived personal data to provide specific information about political attitudes under former totalitarian state regimes, or the protection of the data subject or the rights and freedoms of others, including social protection, public health and humanitarian purposes. These restrictions should be consistent with the requirements of the Charter of Fundamental Rights and the European Convention for the Protection of Human Rights and Fundamental Freedoms.