ICO publishes updated guidance on certification and codes of conduct

The UK Information Commissioner (ICO) has issued new information about certification and codes of conduct. The expected timeline for certification is:

Summer 2019

  • Final publication of certification and accreditation guidelines and annexes.
  • Additional accreditation requirements drafted and submitted to the European Data Protection Board (EDPB) for its opinion.
  • Following final approval of the certification annex, the ICO will start accepting certification schemes for approval.

Autumn 2019

  • Additional accreditation requirements will be finalised and published.

The ICO expects that the European Data Protection Board (EDPB) guidelines on Codes of Conduct will be finalised in summer 2019. The ICO’s submission process for Codes of Conduct approval will open following the approval of these guidelines, and is expected to be in autumn 2019.

However, the ICO’s timings are subject to progress at the EDPB.