Representatives of the “AFAM” Association of Auditors and Audit Firms trained in the field of personal data protection

       On June 29, 2026, the National Center for Personal Data Protection (NCPDP) organized a training session for representatives of the Association of Auditors and Audit Firms “AFAM,” at their request.

       The session aimed to strengthen participants’ knowledge and develop their practical skills in the field of personal data protection, with an emphasis on the correct and uniform application of the provisions of Law No. 133/2011 on personal data protection, as well as relevant standards and best practices in this area.

       The session addressed in detail the fundamental principles of personal data processing, including lawfulness, fairness and transparency; purpose limitation; data minimization; accuracy; storage limitation; and ensuring data integrity and confidentiality. The session also highlighted the essential role of adhering to these principles in audit work, where access to significant volumes of information entails a high level of responsibility.

       Another important topic concerned establishing the legal grounds for personal data processing, with an emphasis on the need to correctly identify these grounds based on the specific context of audit and verification activities. The obligations of controllers and processors were also discussed, including those related to documenting processing activities, maintaining internal records and respecting the rights of data subjects.

       Participants were also informed about the importance of implementing appropriate technical and organizational measures to ensure data security, prevent unauthorized access, loss or improper disclosure of information, as well as the need for periodic risk assessments related to processing activities.

       At the same time, practical aspects of audit work were presented, including common situations regarding auditors’ access to personal data, the legal limits of such access and the need to comply with the principles of proportionality and data minimization during audit and control engagements.

       The session also included an active exchange of views and questions from participants, who addressed specific situations from their professional practice, thereby helping to clarify certain practical aspects and foster a better understanding of the regulatory framework.

       The NCPDP welcomes the interest shown by representatives of the “AFAM” Association in deepening their knowledge in the field of data protection and reiterates the importance of ongoing training for professionals who, in the course of their duties, process personal data, with a view to ensuring a high level of compliance and the effective protection of the fundamental rights and freedoms of data subjects.

       The event, held online, was attended by 55 representatives of the “AFAM” Association of Auditors and Audit Firms.