Guidelines 4/2018 on the accreditation of certification bodies under Article 43 of GDPR

Section 7.6  Certification decision

In addition to point 7.6.1 of ISO/IEC 17065/2012, the certification body should be required to set out in detail in its procedures how its independence and responsibility with regard to individual certification decisions are ensured.