Management Board Decision 68/2021 adopting the rules on processing personal data by the Agency (repealed by Management Board Decision 4/2024).