Where personal data have not been obtained from the data subject and the processing is carried out for purposes of archiving in the public interest, scientific or historical research purposes or statistical purposes, derogations to the right to information are foreseen by the Regulation. In close relation to the two previous points, and to facilitate the availability of data for those purposes, Article 14(5)(b) of the GDPR provides that the provisions of paragraphs 1 to 4 (describing the information that the data controller must transfer to the data subject) shall not apply when “the provision of such information proves impossible or would involve a disproportionate effort, in particular for processing for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes, subject to the conditions and safeguards referred to in Article 89(1) or in so far as the obligation referred to in paragraph 1 of this Article is likely to render impossible or seriously impair the achievement of the objectives of that processing. In such cases the controller shall take appropriate measures to protect the data subject’s rights and freedoms and legitimate interests, including making the information publicly available.”

Therefore, as it can be inferred from the literacy of the provision, further development by Union or Member State’s law is not required here in order to apply this derogation.