In the event that certain specific data or other information related to legal or regulatory compliance are not made available to the crb for review because of an assertion of legal privilege or their proprietary nature , certification should not be granted , or should not continue , unless the crb can obtain demonstration by objective evidence that the full system requirements relating to legal compliance , covering the applicable section of the standard , have been effectively implemented by sufficiently documented and verifiable means 如果组织因信息的法律授权或者权属问题，不能向认证机构提供评价所需的与法律法规符合性相关的特定证据或信息，则认证机构不应授予其证书，或者中止审核；除非组织能够向认证机构提供客观证据，表明组织已通过充分的、文件化的、可验证的方式有效地执行了与法律符合性相根据标准适用章节要求所规定的有关合规守法性的全部体系要求，覆盖了标准适用的部分。
