intended by the regulator. We recommend that any confusion related to the necessity of a general validity for non-third-country transfers codes of conduct will be avoided.
3.3 Requirements relating to the Monitoring Body Concerning paragraph 18, we interpret the language “headquarters” from a non-corporate law perspective, whilst even this legal interpretation is not considered having adverse effects on ourselves. However, we would like to raise a general remark, to allow for an open and fair competitive market for monitoring bodies. We appreciate and acknowledge that they must be fully liable and subject to the supervision of European Authorities. However, we do not recognize any legal requirements under GDPR to call for a European headquarter, alongside the accreditation criteria within Article 41 GDPR. We therefore understand the Guidelines to intend a European establishment, thus we recommend clarifying the Guidelines accordingly.
Guidelines 04/2021 on codes of conduct as tools for transfers: Comments on public consultation
9| 9
