Guidelines 4/2018 on the accreditation of certification bodies under Article 43 of GDPR

Section 7.13  Complaints and appeals, Article 43(2)(d)

In addition to item 7.13.1 of ISO/IEC 17065/2012, the certification body should be required to define,

• (a) who can file complaints or objections,

• (b) who processes them on the part of the certification body,

• (c) which verifications take place in this context; and

• (d) the possibilities for consultationof interested parties.

In addition to item 7.13.2 of ISO/IEC 17065/2012, the certification body should be required to define,

• (a) how and to whom such confirmation must be given,

• (b) the time limits for this; and

• (c) which processes are to be initiated afterwards.

In addition to item 7.13.1 of ISO/IEC 17065/2012, the certification body must define how separation between certification activities and the handling of appeals and complaints is ensured.