Guidelines 4/2018 on the accreditation of certification bodies under Article 43 of GDPR

Section 4.1  Legal and contractual matters

See up to and including paragraphs 4.1.1 – 4.1.3