(21)The EBA, ESMA, EIOPA and the reporting authorities should determine their respective responsibilities as joint controllers of personal data by means of an arrangement between them in accordance with Article 26 of Regulation (EU) 2016/679 and Article 86 of Regulation (EU) 2018/1725, to the extent that those responsibilities are not determined by the Union law or national law to which they are subject.