# Certification bodies 43(d) — GDPR — provision context

> Focused context for a single provision (43(d)), curated from overview.legal on 2026-08-22. Canonical: https://overview.legal/laws/gdpr/art-43#par-2-pnt-d
> Verify against the official text (EUR-Lex / wetten.overheid.nl) before relying on it.

Part of **Certification bodies** (GDPR, full article: https://overview.legal/laws/gdpr/art-43).

## Provision text

### 43(d)

established procedures and structures to handle complaints about infringements of the certification or the manner in which the certification has been, or is being, implemented by the controller or processor, and to make those procedures and structures transparent to data subjects and the public; and


## Topics on this provision

- **Processors** — https://overview.legal/topics/processors
  Entities that process data on behalf of controllers
- **Certification** — https://overview.legal/topics/certification
  Data protection certification mechanisms
- **Controllers** — https://overview.legal/topics/controllers
  Entities that determine purposes and means of processing

## Cited by (exact-provision citations)

- **Opinion 4/2023 on the draft decision of the competent supervisory authority of Malta regarding the approval of the requirements for accreditation of a certification body pursuant to Article 43.3 (GDPR)** (guidance) — https://overview.legal/posts/125872
- **Opinion 11/2022 on the draft decision of the competent supervisory authority of Poland regarding the approval of the requirements for accreditation of a certification body pursuant to Article 43.3 (GDPR)** (guidance) — https://overview.legal/posts/125931
- **Opinion 13/2022 on the draft decision of the competent supervisory authority of Bulgaria regarding the approval of the requirements for accreditation of a certification body pursuant to Article 43.3 (GDPR)** (guidance) — https://overview.legal/posts/125930
- **Opinion 25/2021 on the draft decision of the competent supervisory authority of Lithuania regarding the approval of the requirements for accreditation of a certification body pursuant to Article 43.3 (GDPR)** (guidance) — https://overview.legal/posts/126002
- **Guidelines 4/2018 on the accreditation of certification bodies under Article 43 of the General Data Protection Regulation (2016/679)** (guidance) — https://overview.legal/posts/126260
- **Opinion 13/2026 on the draft decision of the Office of the Data Protection Ombudsman (FI SA) regarding the approval of the requirement for accreditation of a certification body pursuant to Article 43(3) GDPR** (guidance) — https://overview.legal/posts/125674
- **Opinion 11/2022 on the draft decision of the competent supervisory authority of Poland regarding the approval of the requirements for accreditation of a certification body pursuant to Article 43.3 (GDPR)** §18 (guidance, EDPB) — https://overview.legal/posts/125931
- **Opinion 25/2021 on the draft decision of the competent supervisory authority of Lithuania regarding the approval of the requirements for accreditation of a certification body pursuant to Article 43.3 (GDPR)** §29 (guidance, EDPB) — https://overview.legal/posts/126002
- **Opinion 13/2022 on the draft decision of the competent supervisory authority of Bulgaria regarding the approval of the requirements for accreditation of a certification body pursuant to Article 43.3 (GDPR)** §55 (guidance, EDPB) — https://overview.legal/posts/125930
- **Opinion 13/2022 on the draft decision of the competent supervisory authority of Bulgaria regarding the approval of the requirements for accreditation of a certification body pursuant to Article 43.3 (GDPR)** §22 (guidance, EDPB) — https://overview.legal/posts/125930
- **Opinion 13/2026 on the draft decision of the Office of the Data Protection Ombudsman (FI SA) regarding the approval of the requirement for accreditation of a certification body pursuant to Article 43(3) GDPR** §47 (guidance, EDPB) — https://overview.legal/posts/125674
- **Opinion 25/2021 on the draft decision of the competent supervisory authority of Lithuania regarding the approval of the requirements for accreditation of a certification body pursuant to Article 43.3 (GDPR)** §52 (guidance, EDPB) — https://overview.legal/posts/126002

---
Generated by overview.legal · https://overview.legal/laws/gdpr/art-43#par-2-pnt-d · 2026-08-22