Guidelines 01/2018 on certification and identifying certification criteria in accordance with Articles 42 and 43 of the GDPR
SECTION 5 LAWFULNESS OF PROCESSING
a. Do the criteria require checking the lawfulness of processing for individual processing operations with respect to purpose and necessity of processing?
b. Do the criteria require checking all the requirements of a legal basis for individual processing operations?