Certification standard BC5701:2018 provides a framework within which organisations can systematically implement the requirements of the GDPR and the associated accountability. The standard is applicable to all organisations that perform the role of controller and/or processor of personal data, regardless of their size or the type of products and services they provide. After implementation of the standard, organisations may obtain certification in order to demonstrate that they meet the requirements of the standard.