GDPR-CARPA
- Scheme owner
- LU SA
- Scope
Any type of processing except:
personal data processing operations specifically targeting minors under 16 years old,
processing operations in the context of a joint controllership,
processing operations in the context of article 10 GDPR, except those that are clearly defined and regulated by Luxembourgish or European Laws and for which the CNPD is the competent supervisory authority (e.g. Loi du 1er août 2018 relative à la protection des personnes physiques à l’égard du traitement des données à caractère personnel en matière pénale ainsi qu’en matière de sécurité nationale),
processing operations of entities that have not officially designated a DPO* (article 37 GDPR). - Type of criteria
- National certification criteria
- Certification as tool for transfers
- No
- List of documents assessed by the EDPB
- LU SA – GDPR-CARPA Certification criteria-1.docx
EuroPriSe
- Scheme owner
- EuroPriSe Cert GmbH
- Scope
Certification of processing operations by processors in accordance with the GDPR using the EuroPriSe method
- Type of criteria
- National certification criteria
- Certification as tool for transfers
- No
- List of documents assessed by the EDPB
- EuroPriSe_criteria catalogue_Processors_EN_v2_1
EDPBI:CY:OSS:D:2023:970
- CSA
-
-
de
-
it
-
fr
-
- Main legal reference
- Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject)
- Article 17 (Right to erasure (‘right to be forgotten’))
- Relevant topics
- Outcome
- No sanction
EDPBI:EE:OSS:D:2023:1023
- CSA
-
-
lv
-
- Main legal reference
- Article 5 (Principles relating to processing of personal data)
- Article 32 (Security of processing)
- Relevant topics
- Outcome
- Reprimand
EDPBI:EE:OSS:D:2023:1015
- CSA
-
- Main legal reference
- Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject)
- Article 17 (Right to erasure (‘right to be forgotten’))
- Relevant topics
- Outcome
- No sanction
EDPBI:CY:OSS:D:2023:978
- CSA
-
-
mt
-
fr
-
pl
-
- Main legal reference
- Article 15 (Right of access by the data subject)
- Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject)
- Relevant topics
- Outcome
- Reprimand
EDPBI:EE:OSS:D:2023:971
- CSA
-
-
si
- Main legal reference
- Article 6 (Lawfulness of processing)
- Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject)
- Article 13 (Information to be provided where personal data are collected from the data subject)
- Article 14 (Information to be provided where personal data have not been obtained from the data subject)
- Article 15 (Right of access by the data subject)
- Article 18 (Right to restriction of processing)
- Relevant topics
- Outcome
- No violation
EDPBI:EE:OSS:D:2023:1029
- CSA
-
-
de
-
- Main legal reference
- Article 17 (Right to erasure (‘right to be forgotten’))
- Relevant topics
- Outcome
- Reprimand