BS 10012:2017 Data Protection Certification

BS 10012:2017 is a standard that sets out the requirements for establishing and implementing an effective Personal
Data Management System (PDMS). The standard can be applied by any organization, regardless of its size or activity,
that wishes to demonstrate to employees, customers, partners, suppliers or shareholders, its effectiveness in the
management of personal data. Following the ISO structure, it is easy to integrate with other popular Management
System standards into a Unified Management System.

At the beginning of 2016, the European Parliament approved the General Data Protection Regulation (GDPR).
The GDPR is a law for the protection of personal data, which shapes the new environment in which businesses that
process personal data are required to operate and is put into mandatory application by all EU member states. on 25
May 2018, repealing any contrary national regulation.
The Regulation will replace European Directive 95/46/EC and aims to harmonize personal data protection laws across
Europe and reshape the way businesses approach data privacy.
It concerns anyone who, within the substantive and territorial scope of GDPR (Article 2 & 3), processes personal data.
In a few words: THROUGHOUT THE PRIVATE & PUBLIC SECTOR.

After the organization has expressed its interest by sending the Application and accepting the relevant offer, the
process is implemented in two stages (Stage 1 and Stage 2). We first review the organisation' s readiness for
assessment by checking that the necessary BS 10012 processes and measures have been developed. Any findings
will be shared with you so that if any gaps are identified you can manage them. If no findings are recorded then we
will assess the implementation of processes within your organization to ensure they are being implemented
effectively.

Provided the organization's Personal Data Management System Audit is successful, the Certificate is issued shortly.
It is valid for three years, during which two annual surveillance checks must be carried out.

• We have dynamic and experienced staff and partners, who as auditors, and/or technical experts, carry out audits
of high added value for your company.
• We evaluate the audit reports, monitor the long-term improvement of your company's Management System, plan
the audits and inform you about every development of your activities
• We are accredited by the National Accreditation Board (NAB - National Board of Accreditation), a member of
EA-MLA and IAF, in terms of ISO 27001 certification, which is a standard that defines the requirements of
Information Security Management Systems.