Guidelines 01/2018 on certification and identifying certification criteria in accordance with Articles 42 and 43 of the GDPR

SECTION  11  OTHER SPECIAL DATA PROTECTION FRIENDLY FEATURES

a.   Do the criteria require the implementation of data protection enhancing techniques? This could include criteria that require enhanced data protection by eliminating or reducing personal data and/or the data protection risk.

• Example: Criteria requiring enhanced unlinkability by using user-centric identity management such as attribute –based credentials (ABC) over organisation-centric identity management would reflect a data protection enhancing technique.

b.   Do the criteria require the implementation of enhanced data subjects controls to facilitate self-determination and choice?