The German Association for Data Protection and Data Security (GDD)

What The German Association for Data Protection and Data Security (GDD) does

The Gesellschaft für Datenschutz und Datensicherheit e.V. (GDD) is a non-profit professional association founded in 1977 and headquartered in Bonn, Germany, dedicated to promoting practical, feasible, and technically sound data protection. The association serves approximately 3,600 members — primarily mid-market companies, public authorities, data protection officers, and private individuals — plus an alumni network of 12,000+ trained DPOs through its GDD Data Protection Academy. Its core delivery is the GDDcert. EU certification system, which provides structured qualification programs for Data Protection Officers, Auditors, Coordinators, and AI Privacy Experts, with written and oral examinations and 3-year recertification cycles. The technology stack is intentionally non-proprietary: GDD operates the GDDcommunity online portal (community.gdd.de) for member engagement, the DataAgenda Plus subscription platform for templates, archives, and webinars, and relies on EU-domiciled vendors (Microsoft Teams, LimeSurvey, sichere-videokonferenz.de) for collaboration and survey tooling — all governed by EU Standard Contractual Clauses.

GDD generates revenue through two primary streams: annual membership fees (tiered from 40 EUR for students to 250 EUR for individual DPOs, with company memberships starting at 300 EUR and corporate pricing on request) and training/certification fees delivered largely through its operational partner DATAKONTEXT GmbH. The association operates 34 regional Erfa-Kreise (experience exchange circles) across Germany, Austria, and Switzerland with over 5,000 participants, publishes the RDV legal journal, and runs an annual Sommer-Workshop at Timmendorfer Strand. GDD co-founded two strategic entities: CEDPO (2011), a European data protection umbrella with 10 EU member associations that provides GDD a voice in EU Commission and EDPB processes, and DSZ (2013), an Art. 41 GDPR-accredited monitoring body for codes of conduct. Management is led by Managing Director Andreas Jaspers and Chairman Prof. Dr. Rolf Schwartmann (since 2012), with a board composed of academics, former data protection commissioners, and senior practitioners.

Name

The German Association for Data Protection and Data Security (GDD)

Legal name

Gesellschaft für Datenschutz und Datensicherheit e.V.

Website

https://gdd.de

Company type

Private

Founded year

1977

Operating status

Operating

Short description

GDD is a Bonn-based non-profit professional association founded in 1977 serving ~3,600 members — companies, public authorities, and data protection officers — through GDDcert. EU certification programs, 34 regional Erfa-Kreise across DACH, and partnerships with CEDPO and DSZ.

Ownership category

akta.pro rank

Headquarters

HQ city

Bonn

HQ country

Germany

HQ region

Europe

Offices1 record

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Operations, Marketing or Sales, Others, Technology or R&D

Revenue model

1. Membership Fees: Annual membership fees from individual members (data protection officers, private individuals, students, pensioners) and corporate members (companies, public authorities, corporations). Membership fees are tiered by member type and company size.
2. Training and Seminars: Revenue from professional training courses, workshops, and certification programs including data protection officer training, data protection auditor training, data protection coordinator training, and AI privacy expert certification. Organized in partnership with DATAKONTEXT GmbH.

Pricing tiers

Go-to-market motion1 record

Distribution channels4 records

Marketing channels6 records

Core offering

GDD is a non-profit professional association that delivers certified training programs (GDDcert. EU) for data protection officers, auditors, coordinators, and AI privacy experts, alongside a network of 34 regional Erfa-Kreise experience-exchange circles, the RDV legal journal, and the DataAgenda Plus member portal. Its core products are membership subscriptions (tiered for individuals, companies, and public authorities) and fee-based training, certification, and seminar services delivered in partnership with DATAKONTEXT GmbH.

Product overview

The GDD (Gesellschaft für Datenschutz und Datensicherheit e.V.) is a non-profit professional association founded in 1977, serving approximately 3,600 members with a portfolio of training, certification, networking, and publication products centered on data protection and data security. The core product is GDDcert. EU, an umbrella certification brand encompassing structured qualification programs for Data Protection Officers, Data Protection Auditors, Data Protection Coordinators, and AI Privacy Experts, each delivered as assessed training courses with optional certification examinations. The GDD complements its certification portfolio with the Erfa-Kreise professional network (34 regional circles with over 5,000 participants across Germany, Austria, and Switzerland, facilitated through the GDDcommunity portal), the RDV – Recht der Datenverarbeitung legal journal, the DataAgenda Plus member portal (templates, checklists, webinars, archives), and the annual GDD-Sommer-Workshop conference. Sub-brands include the Datenschutz Zertifizierungsgesellschaft mbH (DSZ), an accredited monitoring body for codes of conduct under Art. 40 GDPR, and CEDPO, the European umbrella organization co-founded by GDD in 2011. GDD members also have access to a GDD-Datenschutz-Quiz (annual awareness quiz) and can receive the GDD Scientific Award for outstanding academic work in the field.

Differentiator

Problem solved

Functional benefit

Brands

• GDDcert. EU: GDD's certification program for data protection officers and AI privacy experts, offering training and certification examinations.
• GDDcert.
• GDDcommunity

Products and services

• GDDcert. EU Certification Program GDDcert. EU is the umbrella certification and training program of the GDD Data Protection Academy, offering structured qualification programs for Data Protection Officers (DPO), Data Protection Auditors, Data Protection Coordinators, and AI Privacy Experts. Certifications are earned through assessed training courses and optional written and oral examinations, with a 3-year recertification requirement for the AI-Privacy-Expert certification.
• Ausbildung Datenschutzbeauftragte (Data Protection Officer Training) Multi-part basic training program (Parts 1-3) qualifying participants to serve as internal or external Data Protection Officers in companies and public authorities. Aligned with the GDDcert. EU certification program and delivered in partnership with DATAKONTEXT GmbH.
• Ausbildung Datenschutzauditoren (Data Protection Auditor Training) Training program qualifying participants to conduct Data Protection Audits. Covers audit planning, scope definition, audit methods per ISO 19011, review of processes, TOMs, documentation, and reporting. Ends with an optional GDDcert. examination.
• Ausbildung Datenschutzkoordinatoren (Data Protection Coordinator Training) Training program for decentralized data protection coordinators serving as a practical interface between Fachbereiche and DPOs. Covers data protection law fundamentals and organizational requirements. Ends with an optional GDDcert. examination.
• Fortbildung KI-Datenschutz-Experte (AI Privacy Expert Training) GDDcert. EU Specialized certification training on AI Act (KI-VO) compliance alongside GDPR requirements, covering AI system operator obligations, AI competence requirements per Art. 4 AI Act, and DS-GVO compliance for AI deployment. Includes a 3-day course followed by a written and oral examination. Recertification every 3 years via a one-day update course.
• Erfa-Kreise (Professional Experience Exchange Circles) Regional experience-exchange circles (Erfa-Kreise) operating across Germany, Austria, and Switzerland—currently 34 groups with over 5,000 total participants. Data protection officers and data protection professionals meet regularly to discuss current data protection and data security issues. Managed through the GDDcommunity online platform.
• RDV – Recht der Datenverarbeitung (Legal Journal) The RDV (Recht der Datenverarbeitung) is a specialized legal journal covering data protection and data security law topics. Included as a free membership benefit; otherwise available by annual subscription. Edited by Prof. Dr. Rolf Schwartmann.
• DataAgenda Plus Member Portal A members-only digital platform providing access to data protection templates and checklists, the searchable RDV ONLINE archive, an online subscription to IT-Security journal, monthly working papers, and webinars on data protection topics. Access code provided upon GDD membership.
• GDD-Sommer-Workshop (Annual Summer Workshop) The annual 2.5-day GDD Summer Workshop held at Timmendorfer Strand (Baltic Sea), featuring presentations on current data protection topics, practical discussions, and networking. The 19th edition is scheduled for 17-19 August 2026.
• DSZ – Datenschutz Zertifizierungsgesellschaft mbH (Monitoring Body) A certification company founded in 2013 by GDD and BvD, acting as an accredited monitoring body for codes of conduct under Art. 40 GDPR. Currently accredited for the 'Trusted Data Processor' code of conduct by the Baden-Württemberg supervisory authority.
• CEDPO – Confederation of European Data Protection Organisations European data protection umbrella organization co-founded by GDD in 2011, currently comprising 10 member associations from the EU. Represents data protection practitioners in European legislative processes, EDPB workshops, and the European Commission's Multistakeholder Expert Group on GDPR application.
• GDD Membership (Individual and Corporate Tiers) Annual membership subscriptions for data protection officers, private individuals, students, pensioners, companies, and public authorities. Includes access to the RDV journal, DataAgenda Plus portal, seminars, templates, specific advice, and discounts on events. Company membership starts at 300 EUR/year with pricing scaled by company size; corporate membership is available upon request.

Quantifiable outcome

• Over 12,000 data protection officers trained at GDD Data Protection Academy
• +2 more outcomes

Named customers1 record

Segments4 records

Ideal customer profiles4 records

Technology focussed No

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Integration5 records

Feature1 record

Partnerships

Five partnerships are on record, tiered core, major and minor.

• CEDPO (Confederation of European Data Protection Organisations)coreStrategic or Co-development Partner · 1 January 2011GDD co-founded CEDPO in 2011 as a European data protection umbrella organization. CEDPO currently has 10 member associations from the European Union. GDD actively participates in CEDPO activities including representation in European Commission multistakeholder expert groups, participation in European Data Protection Board workshops, drafting position papers on EU legislation, and promoting the role of data protection officers across Europe.
• DATAKONTEXT GmbHcoreImplementation/ SI/ Consulting PartnerDATAKONTEXT GmbH, based in Frechen, serves as the organizational facilitator for GDD training and certification programs. The company provides basic data protection training courses (Parts 1-3) and shares participant data with GDD for membership recruitment purposes. DATAKONTEXT also hosts the registration pages for GDD seminars and workshops, including the GDD Summer Workshop.
• Datenschutz Zertifizierungsgesellschaft mbH (DSZ)coreStrategic or Co-development PartnerDSZ is a company founded in 2013 by the associations GDD and BvD (Berufsverband der Datenschutzbeauftragten Deutschlands e.V.). DSZ acts as a monitoring body for codes of conduct in accordance with Art. 40 GDPR. It is accredited as monitoring body for the 'Trusted Data Processor' code of conduct by the State Commissioner for Data Protection and Freedom of Information in Baden-Württemberg.
• BvD (Berufsverband der Datenschutzbeauftragten Deutschlands e.V.)majorStrategic or Co-development PartnerGDD and BvD jointly developed the 'Trusted Data Processor' code of conduct for commissioned data processing, specifying interactions between clients and processors and facilitating selection of data protection-compliant processors. Both associations co-founded Datenschutz Zertifizierungsgesellschaft mbH (DSZ) in 2013.
• Industry and Commerce Chambers (Industrie- und Handelskammern)minorChannel Partner/ Reseller/ DistributorSome GDD Erfa-Kreise operate in cooperation with local industry and commerce chambers, which provide venue facilities and ensure appropriate access control for Erfa-Kreise events.

Scale indicators5 records

Recent moves8 records

Expansion highlights5 records

Direct peers

• BvD (Berufsverband der Datenschutzbeauftragten Deutschlands e.V.): The principal German peer association for data protection officers. BvD and GDD are so close that they jointly developed the 'Trusted Data Processor' code of conduct and co-founded DSZ in 2013 — direct overlap in mission, members, and certification offerings.

Broad incumbents

• IAPP (International Association of Privacy Professionals): The dominant global privacy professional association, offering CIPP/E, CIPM, and AIGP certifications and a much larger international membership base. Overlaps with GDD on DPO credentialing but operates globally with materially larger resources.
• ISACA: Global association for IT governance, risk, audit, and cybersecurity professionals offering CDPSE and privacy credentials. Competes with GDD in the data protection auditor segment and has a substantially larger international distribution network.
• TÜV SÜD: Major certification body offering data protection and ISO 27701 certifications across Europe. Competes with GDD's GDDcert. EU program in the enterprise DPO training and audit-certification market with significantly larger commercial reach.

Regional players

• AFCDP (Association Française des Correspondants à la protection des données à caractère personnel): The main French DPO association, comparable in mission and structure to GDD but serving the French market. Useful for EU peer benchmarking and potential CEDPO-adjacent collaboration.

Emerging players

• EuroPriSe (European Privacy Seal): European privacy certification scheme issuing certifications for IT products and services under approved criteria. Adjacent to GDD's DSZ monitoring-body role and competes for the same enterprise compliance-certification budget.
• European Centre for Privacy and Cybersecurity (ECPC): Academic-industry center at Maastricht University focused on privacy and cybersecurity research and certification. Overlaps with GDD on EU privacy certification development and policy engagement.

Others

• Centre for Information Policy Leadership (CIPL): A global privacy and data policy think tank housed at Hunton Andrews Kurth, active in EU and US regulatory dialogues. Comparable to GDD in its policy influence function, though operating as an industry-funded think tank rather than a membership association.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks6 records

Key highlights6 records

Customer concentration

• Xx.com/GDD_eV
• LinkedInlinkedin.com/company/gddev

Compliance2 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles13 records

Subsidiaries1 record

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about The German Association for Data Protection and Data Security (GDD)