The European Data Protection Board published its first opinion regarding certification schemes, responding to a submission from Luxembourg’s National Commission for Data Protection on its EU General Data Protection Regulation Certified Assurance Report-based Processing Activities. The GDPR-CARPA contains requirements that certification bodies have to fulfill in order to be granted the accreditation by the CNPD. EDPB Chair Andrea Jelinek called the opinion "an important step towards greater GDPR compliance," while noting controllers and processors can "gain greater visibility and credibility" by submitting to such certification mechanisms.
Full Story