Publication

6 December 2018

GDPR: implications for auditors

Statutory auditors regularly process personal data obtained from their clients. They are therefore directly impacted by the General Data Protection Regulation (GDPR) that entered into force in May 2018.  

This publication aims to clarify what role auditors play under GDPR, i.e. whether they act as data controllers or as data processors. This distinction matters as the responsibilities allocated to each role are different. 

We conclude that in principle, statutory auditors qualify as data controllers. For non-statutory audit services, we encourage practitioners to analyse the processing of personal data on a case-by-case basis to determine whether they will be considered data controllers or data processors. Respective role and responsibilities should be stated in the engagement letter.

 

 

 

Related content

BlogGDPR one year on: its impact on auditors and accountants?

13 May 2019

Stories from PracticeWorried about the GDPR? Call your accountant!

3 December 2018

UpdateTechnology: GDPR extra

23 March 2018

BlogGetting your SME practice GDPR proof

25 January 2018

BlogGDPR one year on: its impact on auditors and accountants?

13 May 2019

Update SME

6 May 2019

NewsWhy should I care about accountants?

2 May 2019

Blog7 ways accountants can help companies get more sustainable

24 April 2019

Team memberJúlia Bodnárová

18 April 2019

In the mediaEvolution of SME audit in Europe from the perspective of the legislation and auditing standards

10 April 2019

PublicationOur SME work in 2018

10 April 2019

Update SME

8 April 2019

PublicationThe Business Insolvency Directive

28 March 2019

PublicationAudit exemption thresholds in Europe

21 February 2019

Consultation responseEIOPA’S Solvency II reporting and disclosure review 2020

20 February 2019

BlogLooking back, moving forward: our sustainable future starts today

16 January 2019

Publication10 Most popular publications of 2018

11 December 2018

Stories from PracticeWorried about the GDPR? Call your accountant!

3 December 2018

BlogHelp SMEs grow (part 2)

14 November 2018

EventDigital hour webinar: the new role for accountants

17 October 2018

Consultation responseESMA’s draft guidance on prospectus risk factors

16 October 2018

EventIAASB – Shape the future of EER assurance

14 October 2018

NewsOur work towards the Future of Corporate Reporting

9 October 2018

BlogHelping SMEs grow – part 1

8 October 2018

Sign up for our newsletter