On 9 and 10 March, the CNPD Compliance team participated in a workshop on certification activities under the General Data Protection Regulation (GDPR) at the premises of its Spanish counterpart, the AEPD, in Madrid. The CNPD team was heavily involved in the organisation and coordination of this event in collaboration with the CEH (Compliance, E-governance & Health) subgroup of the European Data Protection Board (EDPB).
The aim of this workshop was to share experiences regarding the organisation of GDPR certification activities and the accreditation of certification bodies within the different data protection authorities in Europe (EEA). In this context, the representatives of the data protection authorities of the member states discussed various current topics as well as the cooperation and coordination between the data protection authorities at the European level with regard to the certification and accreditation of certification bodies.
Solutions and actions were discussed and will be implemented in a second step at the level of the CEH subgroup.