Credit institutions issuing covered bonds process significant amounts of personal data. Such processing should at all times comply with Regulation (EU) 2016/679 (opens EUR-Lex in a new tab) of the European Parliament and of the Council ⁽¹⁶⁾. Likewise, the processing of personal data by EBA when, as required by this Directive, it maintains a central database of administrative penalties and other administrative measures that are communicated to it by national competent authorities, should be carried out in accordance with Regulation (EU) 2018/1725 (opens EUR-Lex in a new tab) of the European Parliament and of the Council ⁽¹⁷⁾,