Guidelines 01/2019 on Codes of Conduct and Monitoring Bodies under the GDPR

SECTION 13  APPROVED CODES

82. Clearly the nature and content of the code will determine the roles of the relevant stakeholders in terms of ensuring compliance with the code and the GDPR. However, the CompSA will continue to have a role in ensuring the code remains fit for purpose.

83. The CompSA will therefore work closely with the monitoring body in terms of the reporting requirements arising from the code. The monitoring body will act as the lead contact and coordinator in terms of any issues which may arise in relation to the code.

84. The CompSA would also approve any further amendments or extensions to the code and accredit any new monitoring bodies. As per Article 40 (5) of the GDPR, any amendment or extension of an existing code will also have to be submitted a CompSA in line with the procedures outlined in this document.