Guidelines 4/2018 on the accreditation of certification bodies under Article 43 of GDPR
Section 7.10 Changes affecting certification
In addition to points 7.10.1 and 7.10.2 of EN ISO/IEC 17065/2012, changes affecting certification to be considered by the certification body shall include: amendments to data protection legislation, the adoption of delegated acts of the European Commission in accordance with Articles 43(8) and 43(9), decisions of the European Data Protection Board and court decisions related to data protection. The change procedures to be agreed here could include such things as: transition periods, approvals process with competent supervisory authority, reassessment of the relevant object of certification and appropriate measures to revoke the certification if the certified processing operation is no longer in compliance with the updated criteria.