Eric Lachaud, ‘Accountability and Certification in the GDPR’

The paper aims to demonstrate that the contribution of certification to the accountability requirement in the GDPR remains closely connected to the nature of this instrument and the way it was implemented in the GDPR. In other words, certification attests compliance with the GDPR requirements because by design, certification is an attestation of conformity. The paper also questions the endorsement of certification in the GDPR as an instrument to demonstrate compliance and argues that certification has been intentionally promoted as an optional accountability layer to make compliance verified and attested.

Lachaud, Eric, Accountability and Certification in the GDPR (October 22, 2021).

First posted 2021-11-23 15:00:18

Leave a Reply