1. This Regulation is without prejudice to Union law on the protection of personal data, in particular Regulations and of the European Parliament and of the Council (43) and of the European Parliament and of the Council (44) .
2. Member States shall have in place appropriate technical and organisational measures to ensure the security of personal data processed under this Regulation and in particular to prevent the unlawful or unauthorised access to, or disclosure, alteration or loss of, personal data processed.
3. The competent supervisory authority or authorities of each Member State shall monitor independently the lawfulness of the processing of personal data by the authorities referred to in Article 52 of the Member State concerned, in accordance with national law.
43. Regulation (EU) 2018/1725 of the European Parliament and of the Council of 23 October 2018 on the protection of natural persons with regard to the processing of personal data by the Union institutions, bodies, offices and agencies and on the free movement of such data, and repealing Regulation (EC) No 45/2001 and Decision No 1247/2002/EC (OJ L 295, 21.11.2018, p. 39). ↩︎
44. Directive (EU) 2016/680 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data by competent authorities for the purposes of the prevention, investigation, detection or prosecution of criminal offences or the execution of criminal penalties, and on the free movement of such data, and repealing Council Framework Decision 2008/977/JHA (OJ L 119, 4.5.2016, p. 89). ↩︎