Guidelines 01/2018 on certification and identifying certification criteria in accordance with Articles 42 and 43 of the GDPR

SECTION 8  RIGHTS OF THE DATA SUBJECTS

a.   Do the criteria adequately address data subject’s right to information and require respective measures to be put in place?

b.   Do the criteria require that data subjects are granted adequate or even greater access and control of their data including data portability?

c.   Do criteria require measures put in place providing for the possibility to intervene in the processing operation in order to guarantee data subjects’ rights and allow corrections, erasure or restrictions?