Publication

6 December 2018

GDPR: implications for auditors

Statutory auditors regularly process personal data obtained from their clients. They are therefore directly impacted by the General Data Protection Regulation (GDPR) that entered into force in May 2018.  

This publication aims to clarify what role auditors play under GDPR, i.e. whether they act as data controllers or as data processors. This distinction matters as the responsibilities allocated to each role are different. 

We conclude that in principle, statutory auditors qualify as data controllers. For non-statutory audit services, we encourage practitioners to analyse the processing of personal data on a case-by-case basis to determine whether they will be considered data controllers or data processors. Respective role and responsibilities should be stated in the engagement letter.

 

 

 

Related content

BlogGDPR one year on: its impact on auditors and accountants?

13 May 2019

Stories from PracticeWorried about the GDPR? Call your accountant!

3 December 2018

UpdateTechnology: GDPR extra

23 March 2018

BlogGetting your SME practice GDPR proof

25 January 2018

EventEnhancing reliability of non-financial information

23 March 2020

UpdateSME

25 February 2020

PublicationTowards reliable non-financial information across Europe

19 February 2020

EventTax Day 2020: We’re all in this together!

19 February 2020

PublicationSME risk management

11 February 2020

UpdateSME

17 January 2020

NewsMeet Christian Orth – our new Audit & Assurance Policy Group Chair

7 January 2020

Stories from PracticeDeveloping a values-driven workplace in Romania

6 January 2020

Consultation responseEIOPA’S Solvency II reporting and disclosure review 2020

12 December 2019

Publication10 most popular webpages of 2019

10 December 2019

UpdateSME

5 December 2019

NewsDigital Day 2019 – Interviews

29 November 2019

EventDigital Day 2019: What does innovation cost?

19 November 2019

In the mediaAn Overview of KAMs in the European Banking Sector

15 November 2019

EventCapital Markets Union 2024

12 November 2019

NewsDigitalisation Awards 2019

8 November 2019

UpdateSME

6 November 2019

EventSME agenda for ECON: new term, what priorities?

5 November 2019

EventEvolving needs of SMEs: the profession’s role?

24 October 2019

Consultation responseEIOPA’S Solvency II reporting and disclosure review 2020

21 October 2019

Sign up for our newsletter