Recital (41)
Where this Regulation refers to a legal basis or a legislative measure, this does not necessarily require a legislative act adopted by a parliament, without prejudice to requirements pursuant to the constitutional order of the MemberĀ State concerned. However, such a legal basis or legislative measure should be clear and precise and its application should be foreseeable to persons subject to it, in accordance with the case-law of the Court of Justice of the European Union (the āCourt of Justiceā) and the European Court of Human Rights.
Source: EUR-Lex, Regulation (EU) 2016/679. Official text, reproduced without modification.