The paper shows that the adherence to a CoC offers to SMEs an interesting option to a certification obtained under Article 42 GDPR. Adhering controllers or processors benefit similar rights to the one attached to certification without having to make the demonstration of conformity with the...