1.The processing of personal data by the competent authorities in the Member States shall be carried out in accordance with national laws, regulations and administrative provisions transposing Directive 95/46/EC and under the supervision of the supervisory authority of the Member State referred to in Article 28 of that Directive.
2.Without prejudice to Article 13 of Directive 95/46/EC, personal data obtained or processed pursuant to this Regulation shall be used solely for the purpose of preventing the diversion of scheduled substances.
3.The processing of personal data by the Commission, including for the purpose of the European database, shall be carried out in accordance with Regulation (EC) No 45/2001 and under the supervision of the European Data Protection Supervisor.
4.Member States and the Commission shall not process personal data in a manner incompatible with the purposes set out in Article 13a.