S.L. 258.4 Art. 5Data protection.  Cap. 586.

(1) These regulations shall not prejudice the applicability of Regulation (EU) 2016/679 and of the Data Protection Act, including the regulations made thereunder and the fundamental rights and freedoms of the data subjects.

(2) The Agency acting in its capacity of a controller in accordance with Article 4(7) of the Regulation (EU) 2016/679 shall perform the relevant data processing operations which are limited to the extent needed for the purposes of these regulations and to what is necessary and proportionate to the objectives pursued by the Agency.

(3) For the purposes of these regulations, the processing of personal data, including the processing of special categories of personal data, shall fully comply with the principles relating to the processing of personal data pursuant to Article 5 of Regulation (EU) 2016/679.