Data protection audit: securing GDPR compliance
A data protection audit gives you an assessment of your GDPR compliance. Its scope follows your requirements, from a single process to your entire framework.
We can examine your data protection framework as a whole, or review individual processes, services or products in isolation.
What an audit is suited to
- Audit against the GDPR, German federal law and the relevant special statutes
- Audit as evidence towards contractual partners
- Audit as an overview of where your gaps are
- Audit of individual processes, services and products
- Audit with a data protection seal as evidence
How an audit runs
Step 1: Set the scope
We settle the objective with you and derive the scope of the review. Location, duration and price follow from it, and we can usually name a fixed price.
Step 2: Review the documents
Records of processing activities, contracts with service providers, policies, the deletion concept and the evidence on technical and organisational measures.
Step 3: Audit
Comprehensive audits are frequently carried out on site, individual processes also remotely. We compare what is documented against what is actually practised.
Step 4: Report
You receive a report recording successes as much as challenges, each with proposed solutions. It is drafted so that you can use it towards third parties.
Do you know where you stand?
We settle scope and price in advance so that costs stay predictable.
Request an auditFrequently asked questions
Where does a data protection audit take place?
The arrangements depend on the objective and the scope that follows from it. Broadly, comprehensive audits are frequently carried out on site, while individual processes or services can also be audited remotely.
How long does a data protection audit take?
As with the location, the time depends on the scope of the review. A simple audit of a single process can be done in two hours, while comprehensive audits can run to several days.
What is the benefit of a data protection audit?
After every audit we write a report recording the state of GDPR compliance. It sets out successes as much as challenges, each with proposed solutions. Where needed you can use the report towards third parties to evidence your compliance.
What does a data protection audit cost?
The cost depends on the effort involved, which follows from the requirements and objectives you set. We discuss those points with you in advance, so that we can usually offer a fixed price agreed beforehand. Costs stay transparent and predictable that way.