Data Protection Act (Cap. 586), article 32

32. (1) The certification bodies referred to in Article 43 of the Regulation shall be accredited by the National Accreditation Board (Malta) as established by regulation 3 of the National Accreditation Board (Malta) (Establishment) Regulations. (2) The Board referred to in sub-article (1) shall accredit certification bodies in accordance with EN-ISO/IEC 17065/2012 and with the additional criteria and requirements established by the Commissioner. (3) For the purposes of this article, the National Accreditation Board (Malta) may consult the Commissioner in the process of accrediting certification bodies. (4) Where the Commissioner concludes that the conditions for accreditation are not, or are no longer met, or where action taken by a certification body infringes the Regulation, the Commissioner shall advise the National Accreditation Board (Malta) not to issue such accreditation, or to revoke such accreditation, as the case may be. Power to make regulations.