Member States and the Agency may restrict the scope of the rights of the data subject to access ,