Guidelines 4/2018 on the accreditation of certification bodies under Article 43 of GDPR

Section 9.3  Responsibilities and competencies

See up to and including paragraphs (Annex 1) 9.3.1 –  9.3.4