With regard to the representation of data subjects, the GDPR contains two opening clauses:

Art. 80 I: requirements for the constitution of bodies, organizations or associations       

Art. 80 II: representation of data subjects independent of a data subject’s mandate