Monitoring body

An independent monitoring body with an appropriate level of expertise in relation to the subject-matter covered by the code of conduct is responsible for monitoring of compliance with the code. This body must be accredited for this purpose by the supervisory authority even before the code of conduct is approved. The obligation to appoint a monitoring body does not apply to codes relating to the processing of personal data carried out exclusively by public authorities and bodies. However, this does not mean that such a code does not have to include effective mechanisms to monitor a code.

The supervisory authority accredits the monitoring body of a given code of conduct on the basis of the provisions of the GDPR (see Article 41 of the GDPR), the EDPB Guidelines 1/2019 Codes of Conduct and Monitoring Bodies under Regulation 2016/679, the Act on the Protection of Personal Data (see Article 27) and the Accreditation requirements for code of conduct monitoring bodies. The latter document was developed by the President of the Personal Data Protection Office and reviewed by the EDPB. One can find in it the requirements that a monitoring body must meet in order to be accredited by the supervisory authority

The President of the Personal Data Protection Office makes the list of accredited monitoring bodies available on its website and updates it.

The President of the Personal Data Protection Office makes the list of accredited monitoring bodies available on its website and updates it.