# Codes of conduct 40(7) — GDPR — provision context

> Focused context for a single provision (40(7)), curated from overview.legal on 2026-08-22. Canonical: https://overview.legal/laws/gdpr/art-40#par-7
> Verify against the official text (EUR-Lex / wetten.overheid.nl) before relying on it.

Part of **Codes of conduct** (GDPR, full article: https://overview.legal/laws/gdpr/art-40).

## Provision text

### 40(7)

Where a draft code of conduct relates to processing activities in several Member States, the supervisory authority which is competent pursuant to Article 55 shall, before approving the draft code, amendment or extension, submit it in the procedure referred to in Article 63 to the Board which shall provide an opinion on whether the draft code, amendment or extension complies with this Regulation or, in the situation referred to in paragraph 3 of this Article, provides appropriate safeguards.


## Topics on this provision

- **Codes of Conduct** — https://overview.legal/topics/codes-of-conduct
  Industry codes of conduct for data protection
- **Supervisory Authorities** — https://overview.legal/topics/supervisory-authorities
  National data protection authorities and their powers
- **Supervision** — https://overview.legal/topics/toezicht
  Oversight and enforcement by supervisory authorities
- **Processing** — https://overview.legal/topics/verwerking
  Any operation performed on personal data

## Cited by (exact-provision citations)

- **Guidelines 1/2019 on Codes of Conduct and Monitoring Bodies under Regulation 2016/679** (guidance) — https://overview.legal/posts/38051
- **EDPB Work Programme 2026-2027** (guidance) — https://overview.legal/posts/125689
- **EDPB Work Programme 2024-2025** (guidance) — https://overview.legal/posts/125711

---
Generated by overview.legal · https://overview.legal/laws/gdpr/art-40#par-7 · 2026-08-22