1. All personal data handled in the context of the tasks and activities provided for in this Regulation, including by the Agency, shall be processed in accordance with the applicable law on personal data protection, in particular Regulations (EU) 2016/679 (50) and (EU) 2018/1725 (51) of the European Parliament and of the Council.
2. The Administrative Board shall establish measures for the application of Regulation (EU) 2018/1725 by the Agency, including those concerning the appointment of a Data Protection Officer of the Agency. Those measures shall be established after consultation of the European Data Protection Supervisor.