Certification of data protection professionals - UNI 11697

 Certification is aimed at individuals whose work involves the processing and protection of personal data.
The scheme implemented by IMQ takes account of the following 3 professional profiles established by UNI 11697:

• Data Protection Officer: this is the professional profile governed by EU Regulation 2016/679, with particular reference to art. 39
• Data Protection Specialist: this profile pertains to individuals who support the Data Protection Officer in developing appropriate technical and organisational measures for the purposes of the personal data processing
• Data Protection Auditor: this profile pertains to independent practitioners with both technological/IT and legal/organisational skills and knowledge, who work in the processing and protection of personal data, and who may make use of specialists in both fields, for the purpose of conducting audits

Data Controllers are not always under obligation to appoint a DPO, but the data protection authority encourages voluntary appointment, even where not specifically required by the regulations.

Skills certification to UNI 11697 is an effective way for Data Controllers to demonstrate that they have assessed the skills of their Data Protection Officer.

Certification of these professionals by a third-party body such as IMQ is an additional guarantee of their professionalism; an independent, impartial means of assessing their conformity with the requirements of the standard, and an endorsement of their competence in the market.