Data protection: a compliance-testing tool

At the first RegTech Summit held on 12 October 2017, the Luxembourg Institute of Science and Technology (LIST), Digital Luxembourg and eProseedRTC supported the National Commission for Data Protection (CNPD) in launching a tool to enable organisations to evaluate the extent of their compliance with the new General Data Protection Regulations (GDPR).

Preparing for 25 May 2018

Companies, public administrations and associations who handle personal data are required to comply with the new European regulations by 25 May 2018. 

As a regulatory body, CNPD, together with LIST, have formed a partnership for the purposes of a research project, which is also supported by Digital Luxembourg,  in an effort to assist private and public stakeholders in integrating the provisions of the new regulations.

This tool – the "GDPR Compliance Support Tool" - also contributes to Luxembourg's objective of digitising and simplifying procedures, particularly in terms of ensuring compliance with the current and future regulatory framework.

Ascertain your organisation's level of compliance 

The "GDPR Compliance Support Tool" is an innovative, intuitive solution enabling users to ascertain the level of maturity of their organisations. It contains a comprehensive, in-depth database covering 350 regulatory requirement criteria. 

The tool will allow stakeholders not only to manage a data processing register in addition to the other documents required to demonstrate their compliance, but also to monitor the progress of their level of organisational maturity. The tool will be offered to companies free of charge and its content will be updated on an ongoing basis.

End of the test phase

This first phase of the development of the "GDPR Compliance Support Tool" entailed the development of a test version. So as to remain closely aligned with the needs of the various sectors, this initial version was developed jointly with stakeholders operating in the health and finance sectors. 

The second phase entailed use by 25 companies of this initial version of the tool under real conditions. This test phase was conducted with the aim of exposing the tool to the realities of organisations as early on as possible, and thus to make any necessary adjustments to ensure it is useful. For the current production phase of the tool, eProseedRTC has been selected as partner.

> The "GDPR Compliance Support Tool" will be accessible on the CNPD website by the end of October 2017.