Accreditation of certification bodies under Article 43 GDPR
Guidelines 4/2018 on the accreditation of certification bodies under Article 43 of GDPR
Paragraph 9.3.1 Communication between CB and its customers
Procedures shall be in place for implementing appropriate procedures and communication structures between the certification body and its customer. This shall include
1 Maintaining documentation of tasks and responsibilities by the accredited certification body, for the purpose of
-
a Information requests, or
-
b To enable contact in the event of a complaint about a certification.
2. Maintaining an application process for the purpose of
-
a Information on the status of an application;
-
b Evaluations by the competent supervisory authority with respect to
-
i Feedback;
-
ii Decisions by the competent supervisory authority.