The EU General Data Protection Regulation has been in effect for almost five months, and yet certification still seems to be a long ways away. While there are plenty of reasons why they’re still not available, organizations can take the first steps to get ready for when they finally arrive. Under Article 42 of the GDPR, certification mechanisms will be issued to data controllers and processors. But even with all the guidance that's emerged from global regulatory bodies, including from the CNIL on the certification of data protection officers and Denmark's data protection authority, there remains controversy surrounding GDPR certifications. Ryan Chiavetta, CIPP/US, has the details in this article for The Privacy Advisor.
If you want to comment on this post, you need to login.