Processing and protection of personal data

The Member States and the Commission shall be allowed to process personal data only where necessary for the purpose of carrying out their respective obligations under this Regulation, in particular for monitoring, reporting, communication, publication, evaluation, financial management, verifications and audits and, where applicable, for determining the eligibility of participants. The personal data shall be processed in accordance with Regulation (EU) 2016/679 or Regulation (EU) 2018/1725 of the European Parliament and of the Council
(
40
)
, whichever is applicable.