1. Each of the joint controllers shall comply with the general principles of data protection as laid down in Article 4 of Regulation (EU) 2018/1725 or Article 5 of Regulation (EU) 2016/679, respectively.
2. Each joint controller shall maintain records of processing activities under its responsibility and hold the information necessary to demonstrate its compliance with this Decision.