Privacy assessment

All organisations process personal data of affected persons and must comply with the General Data Protection Regulation (“GDPR“) in doing so. The GDPR provides the conditions for processing personal data in society. The Personal Data Authority (AP) monitors compliance with the GDPR through a privacy assessment.

Measures organisations take revolving personal data

Organisations should take appropriate measures to properly protect personal data. Generally, if more or more sensitive data is processed, the measures protecting personal identifiable (PII-)data will also have to increase.

Through a privacy audit, you can gain insight to the privacy risks for data subject, which the GDPR is complied with and thus whether the privacy interests of data subjects are adequately protected.

A privacy audit provides insight into potential risks to the processing of PII-data and associated compliancy risks. A privacy audit offers opportunities to better protect the protection of processing PII-data and thus also your image by reducing compliance risks or data breaches. If a data breach has occurred, we can assist you in the investigation to help identify the required remediation measurements.

Privacy Toetsing, AVG

Contact us

Would you like to know more about how we can help addressing your privacy concerns or proactively demonstrate your privacy compliance status via a privacy assessment? If so, please contact us. We will be happy to inform you.

The privacy auditor

Mathison has years of experience in conducting privacy audits, both in assisting with privacy issues from clients to service providers and in mapping compliance status with the GDPR and identifying areas for improvement. In addition, we can also conduct a Data Privacy Impact Assessment (DPIA) for you, identifying the risks associated with new or modified processing.

If you need an analysis of the consequences of a (suspected) data breach, a privacy audit can contribute to an independent picture.

NOREA guidelines for privacy assessment

Mathison has years of experience conducting privacy assessments and privacy audits at various organisations. Mathison auditors are experienced privacy auditors that are registered at the supervising body of IT auditors (NOREA). Our auditors are familiar with the Privacy Control Framework (PCF) issued by NOREA and are qualified ISO27701 auditors. The PCF is based on the standard 3000 ‘Assurance engagements by IT auditors’.