Recital 96
Recital 96 of the GDPR, as in force since 25 May 2018. Its key is gdpr-recitals:rec-96.
A consultation of the supervisory authority should also take place in the course of the preparation of a legislative or regulatory measure which provides for the processing of personal data, in order to ensure compliance of the intended processing with this Regulation and in particular to mitigate the risk involved for the data subject.