The national authority may provide standards of interoperability for purposes of portability, free access to data and security, as well as standards for periods in which records on personal data must be kept, considering the necessity and the transparency.