European Data Protection Board logo
Close menu

Certification Mechanisms and Data Protection Seals and Marks

Certification is a voluntary tool that helps organisations ensure and demonstrate GDPR compliance. 
The register provides an overview of the existing certification mechanisms and data protection seals and marks, issued by competent data protection authorities after an EDPB opinion (Art. 42(5) and Art. 42(8) GDPR), including where this amounts to a European data protection seal.
It also include the approved requirements for the accreditation of certification bodies (Art. 43(3) GDPR).

  • 15 items
Filter on
Filter on comptent SA
Filter on type
Filter on scheme owner
Filter on type of criteria

GDPR-CARPA

lu
Scheme owner
LU SA
Scope

Any type of processing except:

personal data processing operations specifically targeting minors under 16 years old,
processing operations in the context of a joint controllership,
processing operations in the context of article 10 GDPR, except those that are clearly defined and regulated by Luxembourgish or European Laws and for which the CNPD is the competent supervisory authority (e.g. Loi du 1er août 2018 relative à la protection des personnes physiques à l’égard du traitement des données à caractère personnel en matière pénale ainsi qu’en matière de sécurité nationale),
processing operations of entities that have not officially designated a DPO* (article 37 GDPR). 

Type of criteria
National certification criteria
Applicability of the scheme

controllers and processors established in Luxembourg

Certification as tool for transfers
Níl
List of documents assessed by the EDPB
  • LU SA – GDPR-CARPA Certification criteria-1.docx 

 

Related links
Opinion 1/2022 on the draft decision of the Luxembourg Supervisory Authority re…

Europrivacy

lu
Scheme owner
European Centre for Certification and Privacy (ECCP)
Scope

Any type of processing except of genetic data

Type of criteria
EU Data Protection Seal
Applicability of the scheme

Controllers and processors within EEA

Certification as tool for transfers
Níl
List of documents assessed by the EDPB
  1. EP-C.A - Application and Target of Evaluation v60
  2. EP-C.G - Europrivacy GDPR Core Criteria v60
  3. EP-C.T - Technical and Organisational Measures v60
  4. EP-C.C - Complementary Contextual Checks and Controls v60

Related links
Opinion 28/2022 on the Europrivacy criteria of certification regarding their ap…

Decision of the EL SA regarding the approval of the requirements for accreditation of a certification body pursuant to Article 43(3) GDPR

gr
Related links
Opinion 22/2020 on the draft decision of the competent supervisory authority of…
Relevant topics

Germany SAs' requirements for accreditation of a certification body pursuant to Article 43(3) GDPR

Related links
Opinion 15/2020 on the draft decision of the competent supervisory authorities …

Irish additional accreditation requirements for certification bodies

Related links
Opinion 14/2020 on the draft decision of the competent supervisory authority of…