Cooperation with Certification Bodies, v1.0
Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 42(3).
Assessment Step
|
1
Cooperation with Certification Bodies (CooperationwithCertificationBodies)
If the entity applies for certification under the GDPR, does it provide the certification body with all necessary information and access to conduct the certification process? Note that GDPR certification is not mandatory.
Artifact
A1
Provide evidence (e.g. organizational policies, procedures, compliance/assessment reports, etc.) and supporting notes as appropriate to support the assessor's response to this assessment step.
|
Conformance Criteria (1)
|
Cooperation with Certification Bodies
If the data controller or the data processor applies for GDPR certification, it must provide the certification body with all information and access necessary to conduct the certification process.
Citation
GDPR
Art. 42(3), Recital 100
|