Article 13 of the EU General Data Protection Regulation:

Information to be supplied where data have been obtained from the data subject