Internal audit - Data privacy (i.e. GDPR)

The Internal audit curriculum has been designed to assist internal auditors in their day-to-day work.

This curriculum consists in several courses, dedicated to core topics, subject to the review of internal auditors. The courses will cover organisational, technical and regulatory aspects. The aim of each course is to give a basic refresh of the regulatory requirements, to help in the identification of the risks faced by the participant's companies and to guide them in the elaboration of an adequate working programme. In addition, we will share best practices and practical tips. Experienced internal auditors and subject matter experts will guide participants throughout this curriculum.

Prerequisite for each participant: basic knowledge and understanding of the topics, as well as of the applicable regulations.

By the end of this training, participants will be able to:

• review major impacts of GDPR and their implications on internal audit responsibilities;
• identify the changes and amendments to be made on their current plans and procedures;
• have a basic refresh of the regulatory requirements;
• benchmark their processes and controls with best practices;
• determine their next steps to embed GDPR in their area of responsibilities;
• be confident in conducting the internal audit review.

• GDPR scope and context
• Main GDPR obligations for entities that process data
• GDPR governance and risk-based approach
• Key processes and controls review
• Assessment of GDPR in the Luxembourgish context
• Experience sharing and benchmarking

This training is coordinated by Alexandre Lambin and Anthony Bianco, Partners at PwC Luxembourg.

Alexandre is a partner within PwC Luxembourg’s Risk Assurance practice, with a particular focus on internal audit services and corporate governance. He has more than 27 years of experience in the audit practice (internal and external).

He is qualified as a Certified Internal Auditor (CIA), Certified Financial Services Auditor (CFSA), Certified in Risk Management Assurance (CRMA) and expert-comptable in the Grand-Duchy of Luxembourg.

Alexandre is also accredited by the Institute of Internal Auditors to lead internal audit functions quality assessments.

Within PwC Luxembourg, Alexandre is co-leading the corporate governance working group with the objective of facilitating and optimising governance related services. He is also closely collaborating with the internal audit departments of several companies across various sectors on a diversified panel of assignments.

Anthony is a partner within PwC Luxembourg’s Internal Audit and Regulatory Advisory teams, boasting over 15 years of experience in both internal and external audit, as well as regulatory practices. He specialises in the financial sector, particularly in asset management and banking.

He is qualified as Certified Internal Auditor (CIA).

Additionally, he gained international experience in the PwC New York office from 2010 to 2012. During this period, he oversaw large alternative investment funds with various strategies and structures. Subsequently, Anthony took part in the outsourcing of the internal audit function of one of the top 20 asset managers worldwide.