Certification Mechanisms and Data Protection Seals and Marks

Certification is a voluntary tool that helps organisations ensure and demonstrate GDPR compliance. 
The register provides an overview of the existing certification mechanisms and data protection seals and marks, issued by competent data protection authorities after an EDPB opinion (Art. 42(5) and Art. 42(8) GDPR), including where this amounts to a European data protection seal.
It also include the approved requirements for the accreditation of certification bodies (Art. 43(3) GDPR).

  • 17 items
Filter on
Filter on comptent SA
Filter on type
Filter on scheme owner
Filter on type of criteria
Filter on certification as tool for transfers

BC5701:2023

Scheme owner
Brand Compliance B.V.
Scope

Generic

Type of criteria
National certification criteria
Applicability of the scheme

Controllers and processors within the Netherlands

Certification as tool for transfers
No
List of documents assessed by the EDPB

Certification standard BC 5701:2022 versie 1.2

 

EuroPriSe

DE/LDI NRW
Scheme owner
EuroPriSe Cert GmbH
Scope

Certification of processing operations by processors in accordance with the GDPR using the EuroPriSe method

Type of criteria
National certification criteria
Applicability of the scheme

Data Processors

Certification as tool for transfers
No
List of documents assessed by the EDPB
  • EuroPriSe_criteria catalogue_Processors_EN_v2_1

GDPR-CARPA

lu
Scheme owner
LU SA
Scope

Any type of processing except:

personal data processing operations specifically targeting minors under 16 years old,
processing operations in the context of a joint controllership,
processing operations in the context of article 10 GDPR, except those that are clearly defined and regulated by Luxembourgish or European Laws and for which the CNPD is the competent supervisory authority (e.g. Loi du 1er août 2018 relative à la protection des personnes physiques à l’égard du traitement des données à caractère personnel en matière pénale ainsi qu’en matière de sécurité nationale),
processing operations of entities that have not officially designated a DPO* (article 37 GDPR). 

Type of criteria
National certification criteria
Applicability of the scheme

controllers and processors established in Luxembourg

Certification as tool for transfers
No
List of documents assessed by the EDPB
  • LU SA – GDPR-CARPA Certification criteria-1.docx 

 

Europrivacy

lu
Scheme owner
European Centre for Certification and Privacy (ECCP)
Scope

Any type of processing except of genetic data

Type of criteria
EU Data Protection Seal
Applicability of the scheme

Controllers and processors within EEA

Certification as tool for transfers
No
List of documents assessed by the EDPB
  1. EP-C.A - Application and Target of Evaluation v60
  2. EP-C.G - Europrivacy GDPR Core Criteria v60
  3. EP-C.T - Technical and Organisational Measures v60
  4. EP-C.C - Complementary Contextual Checks and Controls v60

Decision of the EL SA regarding the approval of the requirements for accreditation of a certification body pursuant to Article 43(3) GDPR

Germany SAs' requirements for accreditation of a certification body pursuant to Article 43(3) GDPR