Article 25 PDPA
Powers of the person carrying out the verification activities
1. The person carrying out the verification activities is authorized to:
1) access to the land and to buildings, premises or other premises during the days and hours of operation of the administrator, processor, manufacturer, or entity marketing the service or product;
2) to inspect documents and information directly related to the activities covered by the certification;
3) visual inspection of equipment, media, and IT or data processing systems;
4) request oral or written explanations on matters related to the activities covered by the certification.
2. Verification activities shall be carried out in the presence of the controller, processor, manufacturer or the entity marketing the service or product, or a person authorized by it.
3. A protocol shall be drawn up from the verification activities and presented to the controller, processor, manufacturer or the entity placing the service or product on the market. The provision of Article 88 shall apply accordingly.