Web banner TEAL
Press release

Grant Thornton Audit & Assurance becomes accredited as a GDPR-CARPA certification body

LUXEMBOURG - On the 19th of May 2023, Grant Thornton Audit & Assurance has been accredited by the Luxembourgish National Supervisory Authority (Commission Nationale pour la Protection des Données - CNPD) to issue GDPR-CARPA Certifications for organisations. 

The GDPR-CARPA certification mechanism was the first certification as per article 42 of the EU regulation 2016/679 (General Data Protection Regulation - GDPR) to be adopted by the CNPD on the 13th of May 2022.

This certification allows organisations to certify selected processing activities using the International Standard for Assurance Engagements (ISAE) 3000. The GDPR-CARPA certification process is mapped to a rigorous criteria designed by the CNPD, and entirely established upon the GDPR. This scheme is a vehicle for enhancing trust for specific personal data processing activities.

To mark this occasion, Grant Thornton Audit and Assurance shall be hosting a reception on 28 June 2023, where the CNPD will co-present to elaborate upon the virtues of this scheme and its benefits. Registrations can be made here.

To learn more, please refer to the GDPR-CARPA Certification section on our website.


With more than 330 people and 24 partners, Grant Thornton Luxembourg is a leading provider of Audit, Tax & Accounting, Advisory and Financial Services for all types of entities in Luxembourg.