It concerns suggestions on how to interpret core principles in the GDPR and may concern binding choices tackled to the info protection authorities on dispute in concrete scenarios with regards to cross-border processing. Formally attest your compliance. An AOC (attestation of compliance) is the form you use to sign that https://www.nathanlabsadvisory.com/testing-for-compliance.html