10 Tips for GDPR Certification
Request your data processors to be certified. Under Art. 28 GDPR, data controllers are liable for what happens with the data shared with their data processors. Getting your data processors certified reduces your legal risks, and your processors monitoring costs and efforts. Use the Europrivacy community website webpage for procurement and tender guidelines.
Purchase a Welcome Pack to access a whole set of useful online resources available for three years, including the Europrivacy online Academy and Community website, as well as the two first publication fees at a lower cost.
Complete the introductory course on the Europrivacy Online Academy (included in the Welcome Pack).
Use the “Certification Journey” page in the Europrivacy Community website with its step-by-step roadmap to certification and direct links to the relevant resources.
Be smart in selecting your priority data processing activities to be certified: Select your target of evaluation (ToE) according to (1) your priority risks, and (2) highest potential of value creation. Discuss with your sales and marketing team to identify the products and services for which the certification can constitute an impactful competitive advantage.
Use the Europrivacy Guidelines for Specifying your Targets of Evaluation available in the Europrivacy Community website. Specify ToE that are (1) comprehensive, (2) manageable, and (3) easily understandable by the public. If you can draw the flows of personal data of your ToE on a A3 page, it is likely to be a good scope.
Request a free online meeting with ECCP team to receive guidance on the certification process through the Europrivacy online contact form.
Use the contact form to request service offers from official partners. Your request will be shared with partners active in your country and they will get in touch with you. You can also directly contact individual service providers through the Official Partner webpage.
Once certified, use the Toolkit Guideline for communicating your certification available in the Europrivacy Community website. It includes guidelines and templates that would facilitate the communication of your certification to your data subjects, partners and other stakeholders.
Follow the recommendations for valuing your certification provided in the same Guidelines and turn your certification into a source of value creation. Engage the relevant internal and external stakeholders and benefit from support of the European Center for Certification and Privacy (ECCP) to celebrate your achievement.