When drawing up a code of conduct, or when amending or extending such a code, associations and other bodies representing categories of controllers or processors should consult relevant stakeholders, including data subjects where feasible, and have regard to submissions received and views expressed in response to such consultations.
This recital of the General Data Protection Regulation clarifies article 40 GDPR (Codes of conductCodes of conduct).*