Netherlands GDPR Implementation Act (UAVG - Uitvoeringswet AVG, 2018) 33(5): Art. 33(5) Process criminal-offence data for statutory audits only as necessary for the engagement

What else in your programme already covers this

This control maps to 1 controls across 1 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.

Other controls in Criminal-offence data (arts 31 to 33) – Netherlands GDPR Implementation Act (UAVG - Uitvoeringswet AVG, 2018)

• 31 Art. 31 Process criminal-offence data only where arts 32 or 33 allow it
• 32 Art. 32 Rely on the general grounds for criminal-offence data only in their cases
• 33(1) Art. 33(1) Rely on the public-sector grounds for criminal-offence data only in their cases
• 33(2) Art. 33(2) Process criminal-offence data for own purposes only to decide on a request or to protect against offences
• 33(3) Art. 33(3) Process criminal-offence data about staff only under rules adopted through the works council procedure
• 33(4) Art. 33(4) Process criminal-offence data for third parties only as a licensed agency, within a group or with an AP permit