juris

Section 48: Certification

Data Protection Act 2017 · PART IX: MISCELLANEOUS

as enacted (not consolidated). juris shows this Act from a copy that is not the official consolidation, so it may not carry every amendment; the amendments juris holds are listed. It does not confirm that this is the law in force today.

48. Certification (1) The Office may, in order to encourage compliance of processing operations by controllers and processors with this Act, lay down technical standards for data protection certification mechanisms and data protection seals and marks. (2) A certification shall be – (a) voluntary; (b) issued to a controller or processor for a maximum period of 3 years and may be renewed under the same conditions where the relevant requirements continue to be met; 510 Acts 2017 Acts 2017 511 (c) withdrawn where the requirements for the certification are no longer met. (3) Where a controller or processor seeks certification under this section, he or it shall provide to the Office all information and access to his or its processing activities which are necessary to conduct the certification procedure. (4) A certification issued under this section shall not alter the responsibility of the controller or processor for compliance with this Act.

Ask juris about this section Official source