Guidelines 01/2019 on Codes of Conduct and Monitoring Bodies under the GDPR
SECTION 5 ADMISSIBILITY OF A DRAFT CODE
19. There are a number of conditions to be met before a CompSA would be in a position to undertake to fully assess and review a code for the purposes of Article 40(5) of the GDPR. They aim to facilitate an efficient evaluation of any draft code. The following criteria apply: see up to and including sections 5.1 – 5.11