To the extent to which processing of personal data is required to comply with the obligations set out in this Act, Regulations (EU) 2016/679 9 and (EU) 2018/1725 10 of the European Parliament and of the Council should fully apply. For instance, the data minimisation principle should be complied with where personal data are collected to ensure an appropriate incident detection. The European Data Protection Supervisor has also been consulted on the draft text of this Act,
recital