Which EU institution is vested with the competence to propose new data protection legislation on its

Which EU institution is vested with the competence to propose new data protection legislation on its own initiative?

A. The European Council
B. The European Parliament
C. The European Commission

D. The Council of the European Union

Reference: https://www.tandfonline.com/doi/full/10.1080/13600834.2019.1573501