This working group is dedicated to editing the privacy section of the certification mark and as of June 16th on draft 0.1 reads as follows.

NB: The keywords “MUST”, “MUST NOT”, “REQUIRED”, “SHALL”, “SHALL NOT”, “SHOULD”, “SHOULD NOT”, “RECOMMENDED”,  “MAY”, and “OPTIONAL” are used as described in RFC 2119.

The supplier of this product or service MUST be General Data Protection Regulation (GDPR) compliant.

This product SHALL NOT disclose data to third parties without my knowledge.

I SHOULD get full access to all the data collected about me.

I MAY operate this device without connecting to the internet.

My data SHALL NOT be used for profiling, marketing or advertising without transparent disclosure.