Guidelines 01/2019 on Codes of Conduct and Monitoring Bodies under the GDPR
Section 7.3 Approval
45. Unless a specific timeline is prescribed under national law, the CompSA should draft an opinion within a reasonable period of time and it should keep the draft owners regularly updated on the process and indicative timelines. The opinion should outline the basis for its decision in line with the criteria for approval as outlined above.
46. If the decision made by the CompSA is to refuse approval, then the process will be completed and it will be a matter for the code owners to assess the findings of the opinion and reconsider the draft code on that basis. It would also be necessary for the code owners to formally re-submit an updated draft code at a later stage, if they choose to do so.
47. If the CompSA approves a draft code, it will be necessary for it to register and publish the code (via its website and/or other appropriate methods of communication). Article 40 (11) also requires the Board to make publicly available all approved codes.