The European Data Protection Board published updated versions of its “Guidelines 4/2018 on the accreditation of certification bodies under Article 43 of the General Data Protection Regulation” and “Guidelines 1/2018 on certification and identifying certification criteria in accordance with Articles 42 and 43 of the Regulation.” The new version of Guidelines 4/2018 contains guidance on the specifications for “'additional' accreditation requirements with respect to ISO/IEC 17065/2012 and in accordance with Articles 43(1)(b) and 43(3) GDPR.” The revamped Guidelines 1/2018 contains “topics that a data protection supervisory authority and the EDPB will consider and apply for the purpose of approval of certification criteria of a certification mechanism.” Editor's Note: IAPP members can use the "GDPR Genius" tool in the Resource Center to find article text, relevant recitals, member state guidance and more.
Full Story