Recital 118
Recital 118 of the GDPR, as in force since 25 May 2018. Its key is gdpr-recitals:rec-118.
The independence of supervisory authorities should not mean that the supervisory authorities cannot be subject to control or monitoring mechanisms regarding their financial expenditure or to judicial review.