Publication

6 December 2018

GDPR: implications for auditors

Statutory auditors regularly process personal data obtained from their clients. They are therefore directly impacted by the General Data Protection Regulation (GDPR) that entered into force in May 2018.  

This publication aims to clarify what role auditors play under GDPR, i.e. whether they act as data controllers or as data processors. This distinction matters as the responsibilities allocated to each role are different. 

We conclude that in principle, statutory auditors qualify as data controllers. For non-statutory audit services, we encourage practitioners to analyse the processing of personal data on a case-by-case basis to determine whether they will be considered data controllers or data processors. Respective role and responsibilities should be stated in the engagement letter.

 

 

 

Related content

BlogGDPR one year on: its impact on auditors and accountants?

13 May 2019

Stories from PracticeWorried about the GDPR? Call your accountant!

3 December 2018

UpdateTechnology: GDPR extra

23 March 2018

BlogGetting your SME practice GDPR proof

25 January 2018

EventEarly Warning Europe Day

28 September 2021

UpdateSME Update

16 September 2021

Consultation responseEFRAG’s consultation paper – due process procedures for EU sustainability reporting standard-setting

14 September 2021

PublicationSMEs’ digital future

13 September 2021

Consultation responseEC’s consultation on fighting the use of shell entities and arrangements for tax purposes

31 August 2021

Consultation responseIAASB’s survey consultation: work plan for 2022‒2023

25 August 2021

NewsCall for dialogue: assessment of SMEs’ post-COVID financial health

19 July 2021

NewsNew Roadmap enhances EU Sustainable Finance Strategy

7 July 2021

Consultation responseFeedback on the Corporate Sustainability Reporting Directive proposal

1 July 2021

EventRoad to digital: How to support SMEs

16 June 2021

BlogSustainability risk management for SMEs: inaction is not an option

14 June 2021

UpdateSME Update

14 June 2021

Consultation responseFeedback statement: EU Taxonomy Article 8 Delegated act

3 June 2021

Stories from PracticeDigitalising the accountancy profession: what role for young professionals?

31 May 2021

Publication3-step sustainability assessment for SMEs

12 May 2021

PublicationAccountants – REACT now and help SMEs adapt to new VAT e-commerce rules

6 May 2021

EventFrom risks to resilience: benefits of intellectual property for your business

4 May 2021

EventWorking Together for the planet: Audit & Assurance of sustainability Information

29 April 2021

NewsAccountancy Europe: Future-proofing tax to make it green, digital and fair

26 April 2021

UpdateSME Update

22 April 2021

Sign up for our newsletter

* indicates required
Would you like to subscribe to our newsletter?
On which topics would you like to receive news?