PwC Cert Receives Accreditation According to DIN EN ISO/IEC 17065 For Data Protection Certification AUDITOR (GDPR CC)
We are pleased to announce that PwC Cert was accredited by the German Accreditation Body (DAkkS) for the AUDITOR data protection certification according to GDPR Art. 42 on May 16, 2025. This accreditation and authorization by the Data Protection Authority of Hessen (HBDI) confirms our commitment and expertise to support cloud providers in demonstrating the compliance of their data processing operations in cloud services with the relevant requirements of the GDPR and the German Federal Data Protection Act (BDSG).
Frankfurt am Main, May 16, 2025
About The Data Protection Certification AUDITOR (GDPR CC)
Until now, it has been difficult for cloud providers to obtain independent certification that their individual cloud services meet the requirements of the GDPR. There was no officially accredited data protection certification to demonstrate data protection compliance for the respective processing operations for each service. Typically, various ISO certifications were used, but these do not constitute certification within the meaning of Art. 42 GDPR. With the AUDITOR data protection certification, we confirm to the cloud provider that the certified data processing operations comply with the relevant requirements of the GDPR and the BDSG (German Federal Data Protection Act) in accordance with the AUDITOR criteria catalog for the listed protection class and recoverability class. To maintain the certification, it is subject to an annual interim audit.
What Does Accreditation Mean For Our Customers?
With the AUDITOR data protection certification, cloud providers not only demonstrate their maturity in data protection law and their sense of responsibility when handling personal data as data processors – they also demonstrably build trust with B2B customers, business customers, and regulatory authorities. Cloud customers may only work with cloud providers that can demonstrate sufficient guarantees of data protection compliance. Our accreditation signals that the certification body for services at PwC Certification Services GmbH has the necessary skills, experience, and expertise according to DIN EN ISO/IEC 17065 and the requirements of the Data Protection Conference to certify data processing operations in cloud services. We accompany you through the entire certification process, from the initial assessment to the final certification, and, as an independent third party, confirm that your certified data processing operations in the cloud service comply with the requirements of the GDPR and the German Federal Data Protection Act (BDSG).
The Path to DAkkS Accreditation
The accreditation procedure was extensive and included a thorough review of our management system, processes, and employee qualifications, as well as ensuring our impartiality. We are proud to have successfully completed the process and see this as confirmation of our expertise in the field of data protection certification of cloud services. Further information about our accreditation can be found here.
Future Plans
This accreditation is a further step in our mission within the PwC network to help organizations comply with key standards and mitigate risks related to the protection of personal data in cloud services. We will continuously expand our certification services to meet the growing needs of our clients.
All information about the AUDITOR data protection certification according to the AUDITOR criteria catalogue by PwC Cert can be found here. Learn how we can help you strengthen trust in your cloud service as a data processor in accordance with the GDPR.
