Under the authority of the EU parliament (assuming that this draft legislation eventually gets a majority there), given to it by the member states through the Treaty on the Functioning of the European Union.

By the way, the directive's wording is actually gender-neutral, talking about an "under-represented sex". If a company has a board dominated by women, it becomes a quota for men.