(5)The joint controllers should process personal data for the purposes of the following supervisory tasks: (a) fit and proper procedures for significant supervised entities; (b) authorisation procedures; (c) ongoing supervision of significant supervised entities; (d) enforcement and sanctions, with the exclusion of certain specific procedures; (e) on-site inspections of significant supervised entities; (f) oversight of the supervision of less significant supervised entities; and (g) supervision of less significant supervised entities.