Audit right

Definição

An audit right entitles one party, usually the client, to inspect the other party's records, systems or processes to verify compliance with the contract, pricing, quality or data-protection obligations. Contracts define the scope, frequency, notice period, confidentiality safeguards and who bears the cost. In data-processing contexts the right also supports the controller's oversight duties under GDPR Article 28.

Exemplo

The client may audit the supplier's billing records once a year on thirty days' written notice, bearing its own audit costs.

Porque é um risco para a empresa

An audit right without a clear exercise procedure is difficult to enforce. Suppliers who resist audits or impose unreasonable conditions can effectively nullify the right. Equally, an unlimited or poorly scoped audit right can disrupt a supplier's operations and damage the relationship. The risk is compounded in data-processing contexts, where the controller's failure to audit can itself be a GDPR compliance gap.

Como gerir

• Define the audit scope precisely: which records, systems or sites are in scope, and which are excluded as commercially sensitive or unrelated to the contract.
• Fix the notice period, frequency and permitted auditor (in-house or independent) so the supplier can prepare without undue disruption.
• Include a confidentiality obligation for audit findings and restrict who within the client organisation can access the results.
• Track annual audit windows as a contract milestone so the right is exercised before it lapses for that year.
• For data-processing agreements, calendar the GDPR Article 28 audit right separately alongside the data-protection review cycle.

Referências jurídicas

• GDPR Art. 28 GDPR: processor obligations and audits Direito da UE

Salvo indicação em contrário, as referências remetem para o direito neerlandês (Burgerlijk Wetboek, o Código Civil neerlandês); os instrumentos da UE, como o RGPD, aplicam-se em toda a UE. Esta é informação geral, não constitui aconselhamento jurídico. Outras jurisdições tratam estes conceitos de forma diferente. Verifique o texto em vigor e a sua situação com um advogado qualificado.