Bitkom views on EDPB Certification Guidelines under Regulation 2016/679

Bitkom appreciates the opportunity to comment on the European Data Protection Board´s (EDPB) Guidelines 1/2018 on Certification and identifying certification criteria in accordance with Articles 42 and 43 of the Regulation 2016/679 (GDPR). A clear and assessable regular framework is needed regarding Certification. We therefore believe that more cooperation and exchange between data protection authorities and practitioners is needed to translate the legal text of the GDPR into practice and reduce legal uncertainty. With regard to Certification, interoperability and transparency are the key factors for their success. Certification will only take considerable effect on the market when the criteria are transparent and therefore comprehensible and reliable.