(4) The Authority shall notify the following as guardian data fiduciaries— (a) (b) data fiduciaries who operate commercial websites or online services directed at children; or data fiduciaries who process large volumes of personal data of children. (5) Guardian data fiduciaries shall be barred from profiling, tracking, or behavioural monitoring of, or targeted advertising directed at, children and undertaking any other processing of personal data that can cause significant harm to the child. (6) Sub-section (5) may apply in such modified form, to data fiduciaries offering counseling or child protection services to a child, as the Authority may specify. (7) Where a guardian data fiduciary notified under sub-section (4)exclusively provides counseling or child protection services to a child, as under sub-section (6), then such guardian data fiduciary will not be required to obtain parental consent as set out under sub-section (2). CHAPTER VI DATA PRINCIPAL RIGHTS 24. Right to confirmation and access. — (1) The data principal shall have the right to obtain from the data fiduciary— (a) (b) (c) (2) 25. confirmation whether the data fiduciary is processing or has processed personal data of the data principal; a brief summary ofthe personal data of the data principal being processed or that has been processed by the data fiduciary; abrief summary of processing activities undertaken by the data fiduciary with respect to the personal data of the data principal, including any information provided in the notice under section 8 in relation to such processing activities. The data fiduciary shall provide the information as required under this section to the data principal in a clear and concise manner that is easily comprehensible to a reasonable person. Right to correction, etc.— (1) Where necessary, having regard to the purposes for which personal data is being processed, the data principal shall have the right to obtain from the data fiduciary processing personal data of the data principal— 14