1. Member States shall apply Regulation (EU) 2016/679 of the European Parliament and of the Council (28) to the processing of personal data carried out in the Member States pursuant to this Regulation.
2. Regulation (EU) 2018/1725 of the European Parliament and of the Council (29) shall apply to the processing of personal data carried out by the Commission and the Agency pursuant to this Regulation.