Guidelines 01/2019 on Codes of Conduct and Monitoring Bodies under the GDPR

Section 5.7  Monitoring body

27. A draft code which involves processing activities of private, non-public authorities or bodies must also identify a monitoring body and contain mechanisms which enable that body to carry out its functions as per Article 41 of the GDPR. The identified monitoring body or bodies must have the appropriate standing to meet the requirements of being fully accountable in their role. To this end, the monitoring body or bodies have to be accredited by the CompSA according to Article 41 (1) of the GDPR.