Recital 27

(27)The processing of personal data for the purpose of implementing this Decision should comply with Directive 95/46/EC of the European Parliament and of the Council of 24 October 1995 on the protection of individuals with regard to the processing of personal data and on the free movement of such data ⁸ and Regulation (EC) No 45/2001 of the European Parliament and of the Council of 18 December 2000 on the protection of individuals with regard to the processing of personal data by the Community institutions and bodies and on the free movement of such data ⁹ . In particular, the operation of the EWRS should provide for specific safeguards for the safe and lawful exchange of personal data for the purpose of contact tracing measures implemented by Member States at national level.