Skip to main content
You are here:

How is Accountor complying with the GDPR

We have comprehensive privacy framework that includes Privacy Policy approved by our Board of Directors, relevant instructions and guidelines. We have governance model in place to ensure the daily implementation of the required activities and to improve the processes continuously. Each of our business unit is responsible for the implementation of data protection in their operations by taking into account applicable data protection requirements and the nature of our business. We have a Data Protection Officer for the group who supports and advises units in their data protection activities. GDPR/Privacy compliance is followed by the Risk and Compliance Committee, which report to the Accountor Leaderment Team.

Our personnel is trained and aware of the data protection requirements. The specific GDPR training is mandatory for all Accountor’s employees.

We have defined processes, detailed guidance and interpretations on, inter alia,

  • individual’s rights
  • data breach management
  • data protection impact assessment

Specific data protection clauses are incorporated into our agreements for customers and business partners. We are committed to ensure that our business partners are compliant with the GDPR.

Information Security 

Since the security attacks are continuously getting stronger, it means that our security must be constantly monitored in order to stay protected from evolving threats. The impact and risks of personal data processing are assessed before starting processing and thereafter when needed, so that data protection is embedded into and maintained in all operations.

Furthermore, we are building data protection safeguards into our products and services from the earliest stages of development. We are currently in a process to build Group level Information Security Governance framework to harmonize information security activities in all business operations and units. 

Information security activities are documented appropriately and reviewed on a regular basis.