The CNIL can certify persons, products, information processing systems or processes. It defines the modalities/requirements according to which accredited third parties may issue certifications, as well as issues labels/certificates for products designed to protect personal data.