Lidl Stiftung & Co. KG is awarded with the EuroPriSe Seal for ZKP, an IT-based service to detect fraudulent manipulations of cashing procedures by checkout clerks, once again.
Lidl Stiftung & Co. KG provides the IT-based service Central Cash Auditing (ZKP) to corporations of the Lidl group. The underlying central cash auditing software is used to detect fraudulent manipulations of cashing procedures by checkout clerks. Point-of-sale data is analysed by the software in order to identify typical fraud scenarios or suspicious performance indicators. When inspecting POS data, competent auditors of Lidl Stiftung can only access pseudonymous data. If strong suspicious cases are identified, they are communicated to the respective corporation of the Lidl group. Subsequently, competent sales managers of this corporation conduct further checks which may confirm or refute a suspicion. These sales managers alone are capable of correlating a pseudonym with the checkout clerk behind it.
When providing the auditing services, Lidl Stiftung & Co. KG processes pseudonymous data of checkout clerks as a processor on behalf of the respective corporations of the Lidl group. Lidl Stiftung maintains documentation which provides comprehensive and understandable information about the functionality of central cash auditing and its data protection implications.
Central cash auditing is not used for the purpose of performance monitoring or in order to identify need for training of checkout clerks.
The re-evaluation was performed by EuroPriSe Legal and Technical Expert Dr. Irene Karper. It took place on the basis of the latest EuroPriSe Criteria Catalogue for IT-products and IT-based Services (v201701). The evaluator concluded that ZKP continues to meet all applicable EuroPriSe requirements (including the new requirements introduced by the current version of the Criteria Catalogue). All changes that had been made to the service since the initial certification were taken into account during the re-evaluation.
Further information about the 2019 recertification is available at https://www.european-privacy-seal.eu/EPS-en/lidl-stiftung-zkp.