1. The EPPO shall establish internal rules on the protection of sensitive non-classified information, including the creation and processing of such information at the EPPO.
2. The EPPO shall establish internal rules on the protection of the EU classified information that shall be consistent with Council Decision 2013/488/EU (30) in order to ensure an equivalent level of protection for such information.