The GDPR-CARPA certification mechanism was the first certification as per article 42 of the EU regulation 2016/679 (General Data Protection Regulation - GDPR) to be adopted by the CNPD on the 13th of May 2022.

This certification allows organisations to certify selected processing activities using the International Standard for Assurance Engagements (ISAE) 3000. The GDPR-CARPA certification process is mapped to a rigorous criteria designed by the CNPD, and entirely established upon the GDPR. This scheme is a vehicle for enhancing trust for specific personal data processing activities.

To mark this occasion, Grant Thornton Audit and Assurance shall be hosting a reception on 28th June 2023, where the CNPD will co-present to elaborate upon the virtues of this scheme and its benefits. Registrations can be made on the Grant Thornton Luxembourg website.

To learn more, please refer to the GDPR-CARPA Certification section on our website.