Under Article 28(1) GDPR, data controllers must only use processors providing sufficient guarantees that their processing meets GDPR requirements and protect data subjects’ rights.

Integrating GDPR Certification into Procurement

To meet this requirement, organisations can build data protection requirements directly into the selection process by integrating GDPR certification into:

• procurement policies
• supplier requirements
• calls for tenders and application forms

Add This to Your Calls for Tender or Application Forms

“Provide information on the certification of your service with a certification scheme recognised under Art. 42 GDPR.”

A valid GDPR certification of the requested service can then be considered as:

• a mandatory requirement
• a selection factor, with dedicated points awarded during the evaluation of offers

Europrivacy Certification as a Supplier Selection Criterion

Europrivacy certification can be used as an approved GDPR certification mechanism to provide a sufficient guarantee of data protection compliance. It can be recognised as an adequate criterion when selecting suppliers.

The result is a more structured way to assess privacy compliance before the contract is signed – helping reduce risk, due-diligence effort and uncertainty later in the supplier relationship.

Build Data Protection into Procurement from the Start

How does your organisation currently integrate data protection requirements into supplier selection?

Looking to Put This into Practice?

Europrivacy Procurement and Tenders Support

https://www.europrivacy.com/en/procurement-support

Practical recommendations for integrating GDPR certification into procurement policies, supplier requirements and tender processes. The guidance can help organisations understand how certification may be reflected in procurement documentation, evaluation criteria and supplier selection processes, and how it can support a more structured assessment of data protection compliance before contracting.

Europrivacy Welcome Pack

https://www.europrivacy.com/en/welcomepack

Additional practical resources, tools and guidance for organisations considering or preparing for certification. The Welcome Pack provides supporting information to help organisations better understand the certification process, identify relevant preparation steps and access useful materials for planning their path towards Europrivacy certification.

Building trust and confidence.

The post Make GDPR Certification Part of Your Procurement Policy appeared first on Europrivacy Community.