Evaluation Body for Privacy

The Independent Centre for Privacy Certification (ULD) accredited 2B Secure the independent Evaluation body of 2B Advice GmbH to carry out the legal checks and to find out whether a product or service meets the requirements to receive the only privacy seal under a state privacy protection act.

2B Advice evaluation body accepted to offer European Privacy Seal

Experts of the 2B Advice evaluation Body for Privacy successfully passed the tests and the company is admitted to offer EuroPriSe evaluations to manufacturers and vendors.
The EuroPriSe certification authorities admit pilot experts under the EuroPriSe project for the legal and/or the technical area of expertise. Admitted pilot experts are authorized to offer EuroPriSe evaluations to manufacturers and vendors of IT products and IT services, to carry out EuroPriSe evaluations and to call themselves 'EuroPriSe Pilot Expert' for the duration of the project.
EuroPriSe experts have to perform a formalized evaluation that complies with certification requirements. Therefore it is necessary to provide a procedure to ensure that private evaluators are independent and reliable and have the necessary expertise.
Since privacy protection incorporates not only technical, but also legal aspects, both aspects have to be covered by evaluators. According to their qualification, they can be admitted for legal, technical, or both types of evaluation. Evaluations need to be precise and comparable. Experts have to prove their legal and/or technical qualification to conduct evaluations by professional skills such as relevant degrees and work experience e.g. as a data protection officer or IT security specialist/lawyer and show work specimens. Degrees or certificates of a tertiary education, as well as state examinations, professional certificates (e.g., CISSP, CISM, GAIC), admissions to the bar or accreditation according to similar certification schemes (e.g., accreditation as an ISO 27000 auditor or a Common Criteria evaluation laboratory) show relevant expertise and will be recognized as part of this proof. Furthermore, experts have to prove reliability and independence.

The experts need to be independent. Independence is indicated if they do not have any financial interest or further contracts with their clients and if they have not been involved in the product development. Experts also need to be independent in the internal structure of their organisation and not be bound by functional directives with respect to evaluation results.
The European Privacy Seal Experts carry out legal and technical checks on the product or service and its documentation and lay down the results in an evaluation report. The experts can either be single experts (such as lawyers or IT consultants) or organized as an evaluation centre. They have to be independent and reliable and they must have an adequate level of legal and/or technical expertise. Therefore only legal and/or technical experts that have been admitted on application by a certification body are allowed to act as a European Privacy Seal Expert.The evaluation body 2B Secure is also accredited to perform privacy evaluations of products and service in accordance with the Independent Centre for Privacy Protection ("ULD") requirements and relevant European Union privacy laws.
The Work includes evaluation requirements necessary to obtain a privacy seal certifying that an official process has confirmed the compatibility of the Target of Evaluation with the provisions governing data protection. In the past 2B Secure has already evaluated products like the Microsoft Update Service or Microsoft Windows Genuine Advantage.

About EuroPriSe

EuroPriSe is a European project funded by the European Commission with 1.2 Mio. Euro under the eTEN programme. The consortium of nine European partners is lead by the Independent Centre for Privacy Protection Schleswig-Holstein (Unabhängiges Landeszentrum für Datenschutz, ULD). EuroPriSe is introducing a European Privacy Seal for IT-products and services that have proven privacy compliance  in a two-step certification procedure: an evaluation by specialized experts and an check of the evaluation report by an independent certification body.
The project will offer pilot certification according to the European Privacy Seal procedure in Germany, Austria, United Kingdom, Slovakia, Spain, Sweden and in further EU countries on request. Technical and legal IT-experts are trained to evaluate IT products and services according to the European Privacy Seal Criteria.

Customer Experience

"The extensive privacy evaluation and legal audits provided by 2B Advice and its accredited experts helped prepare Microsoft to receive the prestigious Unabhängigen Landeszentrum für Datenschutz Schleswig-Holstein (ULD) and EuroPriSe privacy certifications for several of our products. We were particularly impressed by 2B Advice’s international experience and look forward to continuing to work with them on future certifications that provide further assurance to our customers that we are helping protect their privacy."
By:Peter Cullen General Manager, Trustworthy Computing Group, and Chief Privacy Strategist
Microsoft Corporation, USA

More Information:

Imprint | Privacy