Guidelines 01/2019 on Codes of Conduct and Monitoring Bodies under the GDPR
Section 12.8 Legal status
81. The proposed monitoring body (whether internal or external) and related governance structures will need to be formulated in such a manner whereby the code owners can demonstrate that the monitoring body has the appropriate standing to carry out its role under Article 41(4) and is capable of being fined as per Article 83 (4)(c) of the GDPR.