Skip to content
The #1 platform for certification in the Netherlands

Switching certification body for NEN 7510

A new certification body can review your certificate, audit reports and findings and continue the audit cycle.

On this page
  1. Why companies switch
  2. The international rules: IAF MD 2
  3. How the switch works
  4. When does switching make sense for you?
  5. Choosing a NEN 7510 certification body

Why companies switch

Let's be honest: most companies don't actively think about their certification body. You once made a choice, and since then the contract has been automatically extended. But is that smart?

Research shows that companies switch for various reasons:

  • The audit yields too little. You get a certificate, but no real insights that will help your company further.
  • The auditor lacks industry knowledge. A generic approach does not work if your sector has specific challenges.
  • The service is inadequate. Poor accessibility, inflexible planning, slow communication.
  • The price is no longer correct. Rates have risen, or you have discovered that it can be cheaper elsewhere.
  • You want to consolidate. Multiple certificates from different parties is inconvenient.

Internationally, it is even common to change certification bodies every five to ten years. Not out of dissatisfaction, but because a fresh look reveals new areas for improvement. This prevents tunnel vision.

The success of an audit depends on the auditor. Certification remains a human job. If the click is not there, you can be critical of it.

The international rules: IAF MD 2

You may be thinking: "But can I just switch? And what will happen to my certificate?"

Good questions. And the answer is reassuring.

Switching certification bodies is regulated in an international document: IAF MD 2. These are the rules that all accredited certification bodies must adhere to. The most important points at a glance:

Your certificate remains valid

No interruption during or after the transfer. Your new certification body will take over the certification within your existing cycle.

Your old CI should not be a hindrance

They are not allowed to revoke your certificate because you switch. Cooperation with the transfer is mandatory.

Your audit cycle continues

No extra audits, no duplication of work. The new certification body builds on your existing audit history.

Available at any time

You don't have to wait for your certificate to expire. Please note the notice period of your current contract (usually 4-8 weeks).

How the switch works

The practice is less complicated than you might expect. This is what happens:

The pre-transfer review

Your new certification body first looks at your file. They check your latest audit reports, any outstanding deviations and complaint history. This is called the "pre-transfer review" and is not an audit, but an administrative check.

At most companies this is a formality that can be arranged within a few days. You give permission for your current certification body to share the information, and the new party to assess whether everything is in order.

What you need

For a smooth transition, collect these documents:

  • Copy of your current certificate (with expiration date)
  • Audit reports from the last three years
  • Status of any outstanding deviations
  • Overview of complaints and how they were handled

That's it. Your new certification body will take care of the rest.

The timeline

On average, the switching process takes two to four weeks from the moment you choose a new certification body. This depends on the availability of the new auditor and how quickly the documentation is transferred.

When does switching make sense for you?

Not everyone has to switch. But it is smart to regularly evaluate whether your current situation is still suitable. Ask yourself these questions:

  • Does the audit provide you with anything? Do you gain useful insights, or does it feel like an obligatory number?
  • Does your auditor understand your industry? Or do you have to explain how your sector works every year?
  • What is the service like? Are you satisfied with the communication, planning and accessibility?
  • Is the price still correct? Have you compared with other providers in recent years?
  • Does the approach suit your company? Some certification bodies are formal and process-oriented, others personal and pragmatic.

If you answer "no" or "don't know" to several questions, it might be time to compare.

Choosing a NEN 7510 certification body

Not every certification body is allowed to certify NEN 7510. You must choose from accredited parties with specific recognition for this standard.

Accredited certification bodies for NEN 7510

The following certification bodies are accredited for NEN 7510 in the Netherlands:

  • Brand Compliance B.V.
  • BSI Group Nederland B.V.
  • DEKRA Certification B.V.
  • DNV Business Assurance B.V.
  • Kiwa Nederland B.V.
  • LRQA Nederland B.V.
  • Noordbeek Certification B.V.
  • TÜV NORD

Five criteria to pay attention to

Accreditation for NEN 7510

Otherwise the certificate is not valid

Experience in healthcare

An auditor who knows the healthcare sector adds more value

Price

Differences of 20-40% are normal

Service

Permanent contact person? Quick responses?

Working relationship with the auditor

You will work together for at least three years

Questions to ask

Before you choose, ask these questions:

  • Are you accredited for NEN 7510? (check with the national accreditation body)
  • What is your experience with my type of healthcare organisation?
  • Does the auditor have experience with our systems (EPD, HIS)?
  • What are the total costs for three years?
  • How do you deal with the transition to NEN 7510:2024?

The right choice is not necessarily the cheapest. An auditor who understands the healthcare sector and provides constructive feedback is worth more than a few hundred euros in savings.

Read also: How do you choose the right certification body? 5 practical tips - General criteria that also apply to NEN 7510.

Questions about NEN 7510

What is the difference between NEN 7510 and ISO 27001?

NEN 7510 is based on ISO 27001 but contains additional requirements specific to the healthcare sector, such as protecting patient data and medical equipment. ISO 27001 is international, NEN 7510 is Dutch and healthcare-specific. Many organisations combine both standards.

Read the full answer
What does NEN 7510 certification cost?

For a small healthcare practice (GP, physiotherapist), NEN 7510 certification usually costs €5,000 to €8,000 in the first year. Medium-sized healthcare institutions pay €8,000 to €15,000. After that you pay €2,000 to €5,000 a year for surveillance audits.

Read the full answer
How long does NEN 7510 certification take?

For a small, well-prepared practice: two to four months. Medium-sized healthcare institutions: six to twelve months. Large hospitals: twelve to eighteen months. The audit itself takes two to five days.

Read the full answer
Is NEN 7510 mandatory?

Working in line with NEN 7510 is a legal requirement for all Dutch healthcare providers (Decree on electronic data processing by healthcare providers). Certification itself is not mandatory, but it is the most common way to demonstrate compliance to supervisors and partners in the care chain.

Can I combine NEN 7510 with ISO 27001?

Yes, and that is often efficient. Both standards share the same structure. The certification audit can be combined, which saves time and costs. This is especially relevant for IT service providers that also serve healthcare clients.

Which certification bodies may certify NEN 7510?

Only accredited certification bodies may certify NEN 7510. In the Netherlands, these include Brand Compliance, BSI, DEKRA, DNV, Kiwa, LRQA and TÜV NORD.

What are NEN 7512 and NEN 7513?

NEN 7512 covers secure data exchange between healthcare providers. NEN 7513 sets requirements for logging access to patient records. Both build on NEN 7510 and cannot be certified separately.

Is your question not listed?

Get in touch