The EU General Data Protection Regulation has given a new impetus to codes of conduct. According to Article 40, “Associations and representative bodies may prepare codes for approval, registration and publication by a supervisory authority, or where processing activities take place across member states, by the European Data Protection Board. The EU Commission may declare codes recommended by EDPB to have general validity within the EU.”
But what are the big benefits of codes over certification? How will they work, and who is most in need of them? All these questions have only started to be thrashed out in the first six months since the GDPR came into effect.
Full article: Will the GDPR incite sectoral codes of conduct?