European Commission Releases Study on GDPR Data Protection Certification Mechanisms

The European Commission has released a long-awaited study on GDPR data protection certification mechanisms. The 255-page Study aims to support the establishment of certifications and seals under Articles 42 and 43 of the GDPR, and seeks to accomplish three specific objectives: (i) explain the different terms contained in Articles 42 and 43 of the GDPR; (ii) map data protection certification schemes and related technical standards and analyze 15 select certification schemes; and (iii) provide recommendations for certification criteria, additional requirements for the accreditation of certification bodies, technical standards for certification and data protection seals and marks and possible safeguards with respect to data transfers.