The European Data Protection Supervisor and the European Data Protection Board were consulted in accordance with Article 42