When a processor is not a Union institution or body, its adherence to an approved code of conduct referred to in Article 40(5) of Regulation (EU) 2016/679 or an approved certification mechanism referred to in Article 42 of Regulation (EU) 2016/679 may be used as an element by which to demonstrate sufficient guarantees as referred to in paragraphs 1 and 4 of this Article.
Nuair nach institiúid ná comhlacht de chuid an Aontais a bheidh i bpróiseálaí, má chloíonn sé le cód formheasta iompair dá dtagraítear in Airteagal 40(5) de Rialachán (AE) 2016/679 nó le sásra formheasta deimhniúcháin dá dtagraítear in Airteagal 42 de Rialachán (AE) 2016/679, féadfar é sin a úsáid mar eilimint le ráthaíochtaí leordhóthanacha dá dtagraítear i mír 1 agus mír 4 den Airteagal seo a thaispeáint.