Meccanismi di certificazione, sigilli e marchi di protezione dei dati

La certificazione è uno strumento volontario che aiuta le organizzazioni ad attuare e dimostrare la conformità al RGPD.
Il registro fornisce una panoramica dei meccanismi di certificazione esistenti e dei sigilli e marchi di protezione dei dati, rilasciati dalle autorità competenti per la protezione dei dati a seguito di un parere dell’EDPB (articolo 42, paragrafo 5, e articolo 42, paragrafo 8, RGPD), anche quando si tratta di un sigillo europeo per la protezione dei dati.
Elenca inoltre i requisiti approvati per l’accreditamento degli organismi di certificazione (articolo 43, paragrafo 3, RGPD).

  • 15 elementi
Filter on
Filter on comptent SA
Filter on type
Filter on scheme owner
Filter on type of criteria

GDPR-CARPA

Scheme owner
LU SA
Scope

Any type of processing except:

personal data processing operations specifically targeting minors under 16 years old,
processing operations in the context of a joint controllership,
processing operations in the context of article 10 GDPR, except those that are clearly defined and regulated by Luxembourgish or European Laws and for which the CNPD is the competent supervisory authority (e.g. Loi du 1er août 2018 relative à la protection des personnes physiques à l’égard du traitement des données à caractère personnel en matière pénale ainsi qu’en matière de sécurité nationale),
processing operations of entities that have not officially designated a DPO* (article 37 GDPR). 

Type of criteria
National certification criteria
Applicability of the scheme

controllers and processors established in Luxembourg

Certification as tool for transfers
Non pubblicato
List of documents assessed by the EDPB
  • LU SA – GDPR-CARPA Certification criteria-1.docx 

 

Europrivacy

Scheme owner
European Centre for Certification and Privacy (ECCP)
Scope

Any type of processing except of genetic data

Type of criteria
EU Data Protection Seal
Applicability of the scheme

Controllers and processors within EEA

Certification as tool for transfers
Non pubblicato
List of documents assessed by the EDPB
  1. EP-C.A - Application and Target of Evaluation v60
  2. EP-C.G - Europrivacy GDPR Core Criteria v60
  3. EP-C.T - Technical and Organisational Measures v60
  4. EP-C.C - Complementary Contextual Checks and Controls v60

Decision of the EL SA regarding the approval of the requirements for accreditation of a certification body pursuant to Article 43(3) GDPR

Germany SAs' requirements for accreditation of a certification body pursuant to Article 43(3) GDPR