Publication

6 December 2018

GDPR: implications for auditors

Statutory auditors regularly process personal data obtained from their clients. They are therefore directly impacted by the General Data Protection Regulation (GDPR) that entered into force in May 2018.  

This publication aims to clarify what role auditors play under GDPR, i.e. whether they act as data controllers or as data processors. This distinction matters as the responsibilities allocated to each role are different. 

We conclude that in principle, statutory auditors qualify as data controllers. For non-statutory audit services, we encourage practitioners to analyse the processing of personal data on a case-by-case basis to determine whether they will be considered data controllers or data processors. Respective role and responsibilities should be stated in the engagement letter.

 

 

 

Related content

Stories from PracticeWorried about the GDPR? Call your accountant!

3 December 2018

UpdateTechnology: GDPR extra

23 March 2018

BlogGetting your SME practice GDPR proof

25 January 2018

Stories from PracticeWorried about the GDPR? Call your accountant!

3 December 2018

BlogHelp SMEs grow (part 2)

14 November 2018

EventDigital hour webinar: the new role for accountants

17 October 2018

Consultation responseESMA’s draft guidance on prospectus risk factors

16 October 2018

EventIAASB – Shape the future of EER assurance

14 October 2018

BlogHelping SMEs grow – part 1

8 October 2018

PublicationReporting key audit matters in the EU banking sector

28 September 2018

UpdateCapital Markets Union

2 August 2018

Consultation responseEC’s proposal for amending the Directive on cross-border conversions, mergers and divisions

1 August 2018

UpdateTechnology

30 July 2018

UpdateTax Policy

20 July 2018

Consultation responseIESBA’s Proposed Strategy and Work Plan 2019 – 2023

16 July 2018

Consultation responseEC’s Fitness check on the EU framework for public reporting by companies

16 July 2018

UpdateCapital Markets Union

2 July 2018

PublicationPreventing money laundering and terrorist financing

22 June 2018

PublicationTax Intermediaries

18 June 2018

NewsSpeech: QED Conference on Sustainable Finance

5 June 2018

UpdateTechnology

4 June 2018

PublicationProviding support in tax controls and assurance

31 May 2018

Stories from practiceAuditing the coast, saving the beaches

30 May 2018

Sign up for our newsletter