Authentication problem of GDPR

Why does GDPR have the concept of authentication?

   you should already know that GDPR is a law, usually we will say that we are law-abiding citizens, that is to say, our actions do not violate the law, but we never ask someone to help do a certification to prove that we are legal. However, we have been bombarded with ads about GDPR certification.

The certification of GDPR is not groundless. There is a legal basis.

Section 24 of    GDPR gives two ways for data controllers to comply with GDPR requirements: 1, to interpret GDPR requirements and to comply with them; and 2, to obtain certification (Article 42).

As of May 25, 2018, no organization has been certified.

The 42 definitions of the    GDPR law can be authenticated to prove that the data controller complies with the regulatory requirements, but until the day the law came into effect, the European Commission did not authorize any agency to feel the work of certification. If someone says that he has obtained GDPR certification, either he has lied to you or he has been cheated.