# Certification 42(6) — GDPR — provision context

> Focused context for a single provision (42(6)), curated from overview.legal on 2026-08-22. Canonical: https://overview.legal/laws/gdpr/art-42#par-6
> Verify against the official text (EUR-Lex / wetten.overheid.nl) before relying on it.

Part of **Certification** (GDPR, full article: https://overview.legal/laws/gdpr/art-42).

## Provision text

### 42(6)

The controller or processor which submits its processing to the certification mechanism shall provide the certification body referred to in Article 43, or where applicable, the competent supervisory authority, with all information and access to its processing activities which are necessary to conduct the certification procedure.


## Topics on this provision

- **Codes of Conduct** — https://overview.legal/topics/codes-of-conduct
  Industry codes of conduct for data protection
- **Processors** — https://overview.legal/topics/processors
  Entities that process data on behalf of controllers
- **Certification** — https://overview.legal/topics/certification
  Data protection certification mechanisms
- **Supervisory Authorities** — https://overview.legal/topics/supervisory-authorities
  National data protection authorities and their powers
- **Supervision** — https://overview.legal/topics/toezicht
  Oversight and enforcement by supervisory authorities

## Cited by (exact-provision citations)

- **Guidelines 1/2018 on certification and identifying certification criteria in accordance with Articles 42 and 43 of the Regulation** (guidance) — https://overview.legal/posts/38048
- **Guidelines 4/2018 on the accreditation of certification bodies under Article 43 of the General Data Protection Regulation (2016/679)** (guidance) — https://overview.legal/posts/126260

---
Generated by overview.legal · https://overview.legal/laws/gdpr/art-42#par-6 · 2026-08-22