(166) In order to meet the objectives of this Regulation, namely to protect the fundamental rights and freedoms of natural persons, in particular the right to the protection of personal data, and to guarantee the free flow of personal data within the Union, the power to adopt acts in accordance with Article 290 TFEU should be delegated to the Commission. In particular, delegated acts should be adopted with regard to the criteria and requirements applicable to certification mechanisms, with regard to the information presented by standardized logos, and with regard to the procedures for establishing such logos. It is particularly important that the Commission conduct appropriate consultations, including at the expert level, during its preparatory work. During the preparation and drafting of delegated acts, the Commission should ensure simultaneous, timely and appropriate transmission of relevant documents to the European Parliament and the Council.