Art. 7 NL accreditation requirements for GDPR code of conduct monitoring bodies

Explanatory note: Monitoring bodies have a key role in contributing to the review of the code in conjunction with the code owner. As a result of a code review, amendments or extensions to the code may be made by the code owner. Requirements: The monitoring body will contribute to reviews of the code as required by the code owner and shall therefore ensure that it has documented plans and procedures to review the operation of the code to ensure that the code remains relevant to the members and continues to meet the application of the GDPR. The review mechanisms should take into account any changes in the application and interpretation of the law or where there are new technological developments which have impact upon the data processing carried out by the code members or the provisions of the code. The monitoring body shall also provide the code owner and any other establishment or institution referred to in the code of conduct with an annual report on the operation of the code. The report shall include: information concerning new members to the code; details of any suspensions and exclusions of code members; confirmation that a review of the code has taken place and that following review no amendments to the code are required; that there are no substantial changes to the monitoring body; and Information concerning data breaches by code members, complaints managed and the type and outcome of monitoring functions that have taken place. The monitoring body shall apply code updates and implement amendments and extensions to the code as instructed by the code owner. The monitoring body shall ensure that information concerning its monitoring functions is recorded and made available to the AP as required.

Code review mechanisms

Rechtspraak bij dit artikel