GDPR Recital 12: Authorization of the European Parliament and the Council
Article 16(2) TFEU mandates the European Parliament and the Council to lay down the rules relating to the protection of natural persons with regard to the processing of personal data and the rules relating to the free movement of personal data.
Source text: EUR-Lex, Official Journal consolidated HTML (CELEX 32016R0679). Recital short titles are editorial labels from gdpr-info.eu editorial short titles (not official). Cross-checked against gdpr-info.eu (independent reproduction).