A certification body of the kind referred to in Article 43(1) GDPR must be accredited by the CNPD before it certifies processing operations in Luxembourg; the CNPD, not the national accreditation body alone, is the accrediting authority. Accreditation is applied for under the procedure the CNPD publishes (Rules of Procedure of 10 October 2025, Article 33) and is subject to the fees fixed by CNPD regulation under Article 47 of the Act (a fee at each step of the process).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.