GDPR certification guidance drafted

>