Companies, administrations, associations and other bodies established in Luxembourg now have the possibility of demonstrating that their personal data processing operations comply with the GDPR. GDPR-CARPA thus offers data controllers and subcontractors a high level of GDPR compliance for their processing operations subject to certification.
The establishment of certification mechanisms can promote transparency and compliance with the GDPR and allow data subjects to better assess the level of data protection offered by the products, services, processes or systems of organizations that process their personal data. A GDPR certification does not certify an organization but the processing operations covered by the certification.
The CNPD is to date the only European supervisory authority to have itself developed a certification scheme under the GDPR. As the entity that developed the certification criteria, the CNPD also owns the certification scheme.
https://cnpd.public.lu/fr/actualites/national/2022/06/adpoption-gdpr-carpa.html