1. This Regulation shall be without prejudice to the obligations of Member States relating to their processing of personal data under Regulation (EU) 2016/679 and Directive 2002/58/EC, and to the obligations of the Union institutions, bodies, offices and agencies relating to their processing of personal data under Regulation (EU) 2018/1725, when fulfilling their responsibilities.
2. The Commission and, where applicable, other Union institutions, bodies, offices and agencies shall not process personal data except in cases where it is necessary for the fulfilment of their mission. Where appropriate, personal data shall be rendered anonymous in such a manner that the data subject is not identifiable.