(4)Within the framework of its administrative functioning, EIOPA may conduct administrative inquiries, disciplinary proceedings, carry out preliminary activities related to cases of potential irregularities reported to OLAF, process whistleblowing cases, process (formal and informal) procedures of harassment, process internal and external complaints, conduct internal audits, carry out investigations by the Data Protection Officer (‘DPO’) in line with Article 45(2) of Regulation (EU) 2018/1725 and internal (IT) security investigations.