Article 42 - Certification

Article 42 of the GDPR creates a voluntary certification framework that lets data controllers and processors demonstrate compliance with the regulation through approved schemes. It requires certification bodies to be accredited, the schemes to be transparent and regularly reviewed, and the certificates to be recognized across the EU.