Скачать или смотреть CPDP 2017: DATA PROTECTION CERTIFICATION IN THE CONTEXT OF THE GDPR'S NEW ACCOUNTABILITY PRINCIPLE.

Organised by Interdisciplinary Centre for Security, Reliability and Trust (SnT) of the University of Luxembourg and the National Commission for Data Protection of Luxembourg (CNPD)

Chair: Mark Cole, Saarbrücken institute of European Media Law (DE)

Moderator: Andra Giurgiu, Interdisciplinary Centre for Security, Reliability and Trust (LU)

Panel: David Barnard-Wills, Trilateral Research (UK), Alain Herrmann, National Commission for Data Protection (LU), Joëlle Jouret, Belgian Privacy Commission (BE), Paul Voigt, Taylor Wessing (DE)

According to the new accountability principle of the GDPR, the controller shall be responsible for ensuring compliance with the Regulation and, at the same time, be able to demonstrate that. Certification can be used to demonstrate compliance with the GDPR, in general, and in particular with regard to certain obligations. A certification does however not reduce the responsibility of the controller or the processor for compliance with the Regulation and is without prejudice to the tasks and powers of the supervisory authorities. Against this background, the panel intends to discuss the reasons why existing certification schemes have failed before introducing the new legal framework under the GDPR. It will also look at certification in the context of accountability and consider the practical implications for companies.

How would companies benefit from certification?
What consequences does a successful certification have with regards to compliance?
Can DPAs also benefit from solid certification schemes for checking compliance or might certifications pose an additional burden on DPAs?
What shall be certified? Could one imagine the certification of accountability?