(22)This Regulation should be implemented in compliance with the principles relating to privacy and the protection of personal data. The Registry should comply with the relevant Union data protection rules, principles and guidelines, in particular with the relevant security requirements, with the principles of necessity, proportionality, purpose limitation and proportionate data retention period. Also, personal data protection by design and data protection by default should be embedded in all data-processing systems and databases developed and maintained.