Guidelines 4/2018 on the accreditation of certification bodies under Article 43 of GDPR

Section 7.5  Review

In addition to item 7.5 of ISO/IEC 17065/2012, procedures for the granting, regular review and revocation of the respective certifications pursuant to Article 43(2) and 43(3) are required.