Guidelines 4/2018 on the accreditation of certification bodies under Article 43 of GDPR

Section 4.2  Management of impartiality

The accreditation body shall ensure that in addition to the requirement in 4.2. ISO/IEC 17065/2012

1. the certification body comply with the additional requirements of the competent supervisory authority (pursuant to Article 43(1)(b))

• a in line with Article 43(2)(a) provide separate evidence of its independence. This applies in particular to evidence concerning the financing of the certification body in so far as it concerns the assurance of impartiality;

• b its tasks and obligations do not lead to a conflict of interest pursuant to Article 43(2)(e);

2.the certification body has no relevant connection with the customer it assesses.