11. The Commission shall be the supervisory authority within the meaning of, and for the purposes specified in—

(a) the Data Protection Regulation, and

(b) the Directive.