Recital 12
Recital 12 of the GDPR, as in force since 25 May 2018. Its key is gdpr-recitals:rec-12.
Article 16(2) TFEU mandates the European Parliament and the Council to lay down the rules relating to the protection of natural persons with regard to the processing of personal data and the rules relating to the free movement of personal data.