Guidelines 01/2019 on Codes of Conduct and Monitoring Bodies under the GDPR
Section 12.4 Established procedures and structures
70. A monitoring body will also need to have appropriate governance structures and procedures which allow it to adequately:
assess for eligibility of controllers and processors to apply the code;
to monitor compliance with its provisions; and
to carry out reviews of the code’s operation.