Guidelines 01/2019 on Codes of Conduct and Monitoring Bodies under the GDPR

Section 5.2  Representative

21. A code must be submitted by an association/consortium of associations or other bodies representing categories of controllers or processors (code owners) in accordance with Article 40(2). A non-exhaustive list of example of possible code owners would include: trade and representative associations, sectoral organisations, academic organisationsand interest groups.

22. The code owners must demonstrate to the CompSA that they are an effective representative body and that they are capable of understanding the needs of their members and clearly defining theprocessing activity or sector to which the code is intended to apply. Depending on the definition and parameters of the sector concerned, representativeness can be derived amongst others from the following elements:

• Number or percentage of potential code members from the relevant controllers or processors in that sector;

• Experience of the representative body with regard to the sector and processing activities concerning the code.