Make GDPR certification part of your requirements for data-processing service providers.
Once GDPR certification has been integrated into your procurement policy, the next step is to apply it throughout the supplier relationship.
A Practical Three-Step Approach
1. Ask Before You Select
Request information about GDPR certification when assessing new service providers and evaluating their offers.
2. Ask Before You Sign
Ask for certification under an approved Art. 42 GDPR scheme and use it as evidence when assessing a processor’s GDPR guarantees.
3. Ask Again When You Review
For existing service providers, request certification during contract renewals, supplier reviews or compliance assessments. Where appropriate, invite them to certify the relevant processing operations within a defined timeframe.
How GDPR Certification Supports Supplier Due Diligence
A valid GDPR certification provides independently assessed evidence that can support supplier due diligence and help organisations reduce risks, monitoring efforts and associated costs.
Europrivacy Certification Under Art. 42 GDPR
Europrivacy enables organisations to assess, document and demonstrate the GDPR compliance of their processing operations through an approved certification mechanism under Art. 42 GDPR.
Don’t wait for the next privacy concern to arise.
Ask for GDPR certification before you select, sign or renew.
At which stage of the supplier relationship does your organisation currently assess GDPR assurance?
Practical procurement guidance and resources are available below.
Building trust and confidence.
Put This Approach into Practice
Ready to put this approach into practice?
If your organisation is reviewing its procurement policies, supplier requirements, tender processes or approach to GDPR certification, the following Europrivacy resources provide practical guidance and supporting materials.
Europrivacy Procurement and Tenders Support
https://www.europrivacy.com/en/procurement-support
Practical recommendations for requesting GDPR certification from service providers and integrating it into procurement policies, supplier requirements and tender processes.
Use this resource to explore how certification requirements can be incorporated into different stages of procurement and supplier management.
Europrivacy Welcome Pack
https://www.europrivacy.com/en/welcomepack
Additional resources, tools and guidance for organisations considering or preparing for Europrivacy certification.
Explore the Welcome Pack for further information and practical resources to support your organisation in considering or preparing for Europrivacy certification.
