Article 43 - Certification bodies

Article 43 of the GDPR establishes the framework for certification bodies that issue data-protection certifications. It requires such bodies to be accredited, operate independently, keep certified information confidential, and cooperate with supervisory authorities. The article also mandates monitoring, renewal and possible revocation of certifications to ensure ongoing compliance.