3.The processing of personal data referred to in paragraph 1 shall be based on Article 5(1), point (a), of Regulation (EU) 2018/1725, and Article 10(2), point (i), thereof for data concerning health. The Commission shall be controller of the processing of the personal data received from the European Medicines Agency. The Commission shall take specific safeguards for the data processed in the context of Article 10(2), point (i), of Regulation (EU) 2018/1725, such as pseudonymisation, prevention of unauthorised access, prevention of unauthorised reading, copying, modification or deletion of personal data, as well as organisational measures ensuring that personnel authorised to process data have access only to data covered by their access authorisation, and that it is possible to verify and establish what data have been accessed, by which member of the personnel and at what time.