Who Can Deliver Europrivacy Services?
Europrivacy has been designed to deliver highly reliable and trustable assessments and certifications of compliance with the data protection regulation. In order to do this, it relies on a large ecosystem of qualified partners and experts to support data controllers and processors throughout the certification process.
Ecosystem of official partners
These partners have been evaluated and selected on the basis of their track record and expertise in data protection, including:
- Consulting and Law Firms: help you document your compliance, support remediation in case of residual non-conformities, and prepare the selected processing activities for the Europrivacy certification.
- Solution Providers: offer a user-friendly solution to prepare and document your compliance, identify potential non-conformities, and inform you when you have reached the level of readiness to start the certification.
- Certification Bodies: assess the compliance of your data processing with the Europrivacy criteria and deliver a formal and authenticated Europrivacy certificate of GDPR compliance under Art. 42 and 43 of the GDPR.
Only official partners are authorised by ECCP to deliver Europrivacy-related services as a company. This aims at ensuring that the Europrivacy certification is delivered by qualified and reliable service providers. The list of official partners is available on the Europrivacy website. In general, we invite data controllers and processors interested in Europrivacy certification to fill the online application form to receive quotes from, and work with official service providers.
Qualified experts
Individual experts can be trained and receive a formal qualification on the Europrivacy Online Academy, as:
• Europrivacy Implementer
• Europrivacy Auditor
A person that has completed the online course and passed the exam as auditor is considered as qualified to apply the Europrivacy methodology to document and audit the compliance of data processing activities. Nevertheless, formal certification can only be delivered by certification bodies recognized as Europrivacy official partner.
The Europrivacy Online Academy focuses on the Europrivacy methodology. Experts shall have a complementary training and qualification with regards to personal data protection regulations. Qualified experts are authorised to highlight and communicate about their expertise as individuals. However, they cannot use it to present a company as qualified partner, as that would be misleading. They may also join the Pool of Experts of the Europrivacy Community Website, accessible to consulting firms, certification bodies, and potential applicants with work opportunities.
Alternatively, a DPO can also personally prepare the documentation for the certification. This would require to be trained as implementer on the Academy and to subscribe to the Community website in order to benefit from a whole set of online resources. In all cases, a certification can only be delivered by accredited and authorized Europrivacy Certification Bodies.