The General Data Protection Regulation (GDPR) is a European law that has been in force since May 2018. The law aims to protect the privacy of citizens and ensures that companies and organizations handle personal data more carefully.

5 jaar AVGImpact 5 years GDPR

The law has had a huge impact on how companies and organizations collect and use personal data. It has become an important tool in protecting the privacy of European citizens.

One of the biggest changes that GDPR has brought about is the way companies and organizations deal with consent. Before the GDPR, consent was often presumed, which meant that companies and organizations could collect and use personal data without explicit consent from the data subjects. But now the GDPR requires companies and organizations to get clear consent from individuals before their personal data is collected and used.

Another important change is the tightening of the rules regarding the processing of personal data. Companies and organizations must now have clear and transparent policies about how they process and protect personal data. This creates more trust among consumers and gives them more control over their personal data.

Consequences of not complying with the GDPR

Failure to comply with the GDPR certification can have major consequences for companies and organizations:

  • It can lead to significant fines and reputational damage, which can result in the loss of customers and sales.
  • It can have legal consequences, including lawsuits and criminal charges.

To avoid these risks, companies and organizations must comply with GDPR standards and ensure they meet all requirements.

GDPR Certification

An GDPR certification can offer the solution for companies and organizations. A certification can demonstrate that the strict requirements of the GDPR are met and that customer privacy is taken seriously.

Since 2017, Brand Compliance has been investing in the development of a GDPR certification, the BC 5701. This certification criteria contains criteria for the demonstrably appropriate elaboration and consistent application of the GDPR when processing personal data. With a BC 5701 certification, an organization can therefore demonstrate that the relevant processing of personal data is carried out in accordance with the GDPR and that the organization carries out all processes related to those processing operations in a controlled manner.


  • creates more consumer confidence;
  • contributes to a positive image;
  • creates more efficient business operations because personal data is better managed and protected.

Would you like to know more about our BC 5701 certification? Please contact one of our account managers.