1. The processing of personal data by the Agency shall be subject to Regulation (EU) 2018/1725.
2. The Management Board shall adopt measures for the application of Regulation (EU) 2018/1725 by the Agency, including measures concerning the data protection officer. Those measures shall be adopted after consulting the European Data Protection Supervisor.