Article 21

1. Member States shall apply Directive 95/46/EC to the processing of personal data carried out in that Member State pursuant to this Regulation.
2. Regulation (EC) No 45/2001 shall apply to the processing of personal data carried out by the ESAs.