Guidelines 4/2018 on the accreditation of certification bodies under Article 43 of GDPR
SECTION 2 NORMATIVE REFERENCE
GDPR has precedence over ISO/IEC 17065/2012. If in the additional requirements or by certification mechanism, reference is made to other ISO standards, they shall be interpreted in line with the requirements set out in the GDPR.