Where we work · Liechtenstein
ISO and GRC certification consulting in Liechtenstein
Achieve ISO and GRC certification in Liechtenstein with Sterling: 8,100+ client engagements in 60+ countries, 20+ years.
- 21 standards, one team
- Accredited certification route
- Frankfurt office team
- Effivity and Academy included
Sectors that ask for certification in Liechtenstein
Clients include
ISO and GRC certification in Liechtenstein at a glance
Liechtenstein belongs to the European Economic Area rather than the European Union, yet its statute book follows EEA law closely, and that shapes what regulators and customers ask for. The Datenschutzgesetz serves the GDPR, with the Datenschutzstelle as national supervisory authority. The Cyber-Sicherheitsgesetz of 2024 sets cyber-security duties for medium-sized and large entities in listed sectors, under the Stabsstelle Cyber-Sicherheit. The Finanzmarktaufsicht supervises banks, payment firms, asset managers and trustees, the Amt für Lebensmittelkontrolle und Veterinärwesen controls food businesses and the Amt für Gesundheit oversees medical devices. Public procurement rules point contracting authorities to quality and environmental certificates from accredited bodies. Demand comes from financial services, engineering exporters, device makers, food and wine producers and public-sector suppliers. The Liechtensteinische Akkreditierungsstelle is the national accreditation service. Sterling brings 20+ years and 8,100+ client engagements in 60+ countries, serves Liechtenstein from its Frankfurt office, and includes Effivity and Sterling Academy with the engagement. Certificates come from accredited certification bodies, not from Sterling.
ISO and GRC standards Sterling delivers in Liechtenstein
Each card opens Sterling's guide to the standard: what it requires, how certification or compliance works and what sets the time and cost.
Quality & operational excellence
Information security, cyber & cloud
Privacy & data protection
AI governance & digital trust
Environment, energy & climate
Health & safety
Governance, risk & resilience
Financial services, payments & AML
Food safety & agriculture
Healthcare, medical devices & life sciences
Laboratories, inspection & accreditation
Automotive, aerospace, rail & defence
Construction, energy, oil & gas
Regulators and laws that drive certification in Liechtenstein (9)
| Law or regulator | What it asks for | Standards it cites |
|---|---|---|
| General Data Protection Regulation (GDPR) as applied in the EEA and the Datenschutzgesetz (DSG) Datenschutzstelle, which the Act designates as the national supervisory authority under the GDPR; it is competent for public and non-public bodies, except the Government's own activity and the courts' judicial activity, and acts independently | The Act applies to public bodies and to non-public bodies that process personal data in Liechtenstein, through a Liechtenstein establishment, or that fall within the GDPR without an EEA establishment. It adds national rules on video surveillance of publicly accessible areas, which must be notified to the Datenschutzstelle before use, on data protection officers, on scoring and credit information and on automated individual decisions. The Act states it entered into force on 1 January 2019, subject to the referendum period. The current text is listed in the official consolidated law database. | |
| Accreditation of GDPR certification bodies under the Datenschutzgesetz Liechtensteinische Akkreditierungsstelle (Liechtenstein Accreditation Service) | The Act gives the Liechtenstein Accreditation Service the task of authorising a body to act as a certification body under the GDPR's certification article. The GDPR has no general certificate for organisations; this route applies only to approved certification mechanisms. | |
| Finanzmarktaufsicht (FMA) Liechtenstein Financial services (banks, payment and e-money institutions, investment undertakings, asset managers, insurance intermediaries, pension funds, trustees, auditors) | Finanzmarktaufsichtsgesetz (FMAG), LGBl. 2004 Nr. 175 — the Act makes the FMA an independent public-law institution, names market stability, client protection, prevention of abuse and implementation of recognised international standards as its objectives, and lists the sector laws it enforces, including the Banking Act, the Payment Services Act, the due diligence law, the auditors law and the trustees law. | |
| Stabsstelle Cyber-Sicherheit (national competent authority for cyber-security and single point of contact under the Act) Entities in the sectors listed in the Cyber-Sicherheitsgesetz (energy, transport, banking, health, water, digital infrastructure, managed services, public administration; food, manufacturing, digital providers and others) | Cyber-Sicherheitsgesetz (CSG) vom 5. Dezember 2024, LGBl. 2025 Nr. 111 — covers medium-sized and large entities in the sectors of its two annexes, and certain entities of any size; requires risk-management measures that take account of relevant European and international standards, with minimum topics including risk analysis, incident handling, business continuity, supply-chain security, access control and cryptography; requires significant incidents to be notified to the Stabsstelle. The Act states that its provision implementing the NIS2 Directive takes effect together with the EEA Joint Committee decision on that Directive. | |
| Amt für Lebensmittelkontrolle und Veterinärwesen (ALKVW); the Government supervises enforcement Food businesses, slaughterhouses, primary production, milk testing and wine harvest control | Lebensmittelkontrollverordnung (LMKV), LGBl. 2000 Nr. 94 — gives the ALKVW the official controls under the food legislation it applies (which it cites by reference to Swiss federal food law), including approval of slaughterhouses and establishments handling food of animal origin, receipt of notifications from food businesses, inspections and sampling by accredited test bodies. | |
| Amt für Gesundheit (competent authority); Amt für Volkswirtschaft (authority responsible for notified bodies) Medical devices (manufacturers, authorised representatives, importers, health institutions) | EWR-Medizinprodukteverordnung (EWR-MepV), LGBl. 2021 Nr. 161 — regulates placing medical devices on the market in the EEA by reference to Regulation (EU) 2017/745; the Amt für Gesundheit registers manufacturers, authorised representatives and importers, receives vigilance reports and carries out market surveillance. | |
| Amt für Volkswirtschaft Occupational safety and health (all employers under the Arbeitsgesetz or compulsory accident insurance) | Verordnung vom 16. Juni 1998 über die Sicherheit und den Gesundheitsschutz der Arbeitnehmer am Arbeitsplatz, LGBl. 1998 Nr. 111 — implements the EEA health-and-safety framework; requires the employer to organise protective measures, to assess hazards for the activities carried out, to inform and instruct workers and to review protective measures. | |
| Amt für Umwelt (the 2012 law merged the former environmental protection office into it) Environmental protection (installations, emissions, environmental damage) | Umweltschutzgesetz (USG) vom 29. Mai 2008, LGBl. 2008 Nr. 199 — protects people, animals, plants and habitats against harmful effects, applies the precautionary principle and implements EEA environmental directives. | |
| Energiefachstelle at the Amt für Volkswirtschaft, with the Energiekommission Energy efficiency and renewable energy | Energieeffizienzgesetz (EEG) vom 24. April 2008, LGBl. 2008 Nr. 116 — regulates funding contributions for energy-efficiency measures and renewable energy, and sets the framework for national and municipal energy registers. |
Accreditation and recognition
- Liechtensteinische Akkreditierungsstelle (Liechtenstein Accreditation Service): National accreditation service set up under the Act of 2 May 1996 on accreditation and notification and its ordinance, placed with the technical testing, measurement and standards office of the Amt für Volkswirtschaft; it grants accreditation to calibration, testing, inspection and certification bodies that are government offices or persons registered in Liechtenstein's trade register with a seat or domicile in the country.
Look for a certification body whose accreditation scope covers your standard and sector, from a national accreditation body recognised under the international arrangements of Global ACI (Global Accreditation Cooperation Incorporated, formerly the IAF MLA). Sterling does not certify.
Tenders and procurement
- Verordnung vom 3. November 1998 über das Öffentliche Auftragswesen (ÖAWV) — provision on proof of quality (Government of Liechtenstein; contracting authorities apply it): Where a contracting authority asks for certificates from independent bodies to prove compliance with quality assurance standards, it must refer to quality assurance systems that meet the relevant European standards and are certified by accredited bodies, and equivalent certificates from other EEA states must be accepted. For environmental management it refers to EMAS, other systems recognised under the EMAS Regulation, or standards based on European or international standards and certified by accredited bodies.
- Gesetz vom 19. Juni 1998 über das Öffentliche Auftragswesen (ÖAWG) — technical specifications (Landtag / Government of Liechtenstein): Technical specifications follow a ranking that starts with national standards implementing European standards. A test report or certification from a recognised body counts as proof that an offer meets the specification, recognised bodies being testing, calibration, inspection and certification bodies that meet European standards, and certificates from recognised bodies in other EEA states must be accepted.
Sterling in Liechtenstein
Sterling delivers in Liechtenstein from its Frankfurt office: one team from scoping to certificate, with Effivity ISO & GRC software and Sterling Academy access included. Sterling does not certify; certification decisions stay with independent bodies.
Questions Liechtenstein clients ask
Which language are certification audits in Liechtenstein carried out in?
German or English, as agreed with the certification body when you apply. German is the state and official language under the Constitution, so authorities and legal texts use it, while English is common in international business. Settle the language of the audit and of controlled documents early, and follow any language clause in a tender or customer contract.
Does the GDPR apply in Liechtenstein if it is not in the EU?
Yes. The Datenschutzgesetz states that it serves to carry out the GDPR, and the current EEA version of the Regulation applies through the EEA Agreement. The Act applies to organisations processing data in Liechtenstein or through a local establishment, and to others who fall within the GDPR. Confirm how it reaches your business with your counsel or the Datenschutzstelle.
Who supervises data protection in Liechtenstein?
The Datenschutzstelle. The Datenschutzgesetz designates it as the national supervisory authority under the GDPR, competent for public and non-public bodies except the Government's own activity and the courts' judicial activity, and it acts independently. Video surveillance of publicly accessible areas must be notified to it before it is used.
Which Liechtenstein law sets cyber-security duties for companies?
The Cyber-Sicherheitsgesetz of 5 December 2024. It covers medium-sized and large entities in the sectors listed in its annexes, and some entities of any size, and asks for risk-management measures, incident notification to the Stabsstelle Cyber-Sicherheit and management accountability. Whether your organisation is in scope depends on its sector and size, so check with the Stabsstelle or your counsel.
Who accredits certification bodies in Liechtenstein?
The Liechtensteinische Akkreditierungsstelle is the national accreditation service. It sits within the technical testing, measurement and standards office of the Amt für Volkswirtschaft and can accredit calibration, testing, inspection and certification bodies. Whichever body you use, check who accredited it and that the accreditation scope covers your standard and sector.
Do Liechtenstein public tenders ask for ISO certificates?
Sometimes. Under the public procurement ordinance an authority that wants independent evidence of quality assurance points to systems based on European standards and certified by accredited bodies, and for environmental management it points to EMAS or certified standards. Certificates from bodies in other EEA states count too. The tender documents set the actual criteria.
Start with a free discovery call
A Sterling consultant goes through your entities, your regulators and your target date with you. No proposal until the scope is agreed.
Sources
- General Data Protection Regulation (GDPR) as applied in the EEA and the Datenschutzgesetz (DSG) — gesetze.li (accessed 18 Oct 2026)
- Accreditation of GDPR certification bodies under the Datenschutzgesetz — gesetze.li (accessed 18 Oct 2026)
- Finanzmarktaufsichtsgesetz (FMAG), LGBl. 2004 Nr. 175 — gesetze.li (accessed 18 Oct 2026)
- Cyber-Sicherheitsgesetz (CSG) vom 5. Dezember 2024, LGBl. 2025 Nr. 111 — gesetze.li (accessed 18 Oct 2026)
- Lebensmittelkontrollverordnung (LMKV), LGBl. 2000 Nr. 94 — gesetze.li (accessed 18 Oct 2026)
- EWR-Medizinprodukteverordnung (EWR-MepV), LGBl. 2021 Nr. 161 — gesetze.li (accessed 18 Oct 2026)
- Verordnung vom 16. Juni 1998 über die Sicherheit und den Gesundheitsschutz der Arbeitnehmer am Arbeitsplatz, LGBl. 1998 Nr. 111 — gesetze.li (accessed 18 Oct 2026)
- Umweltschutzgesetz (USG) vom 29. Mai 2008, LGBl. 2008 Nr. 199 — gesetze.li (accessed 18 Oct 2026)
- Energieeffizienzgesetz (EEG) vom 24. April 2008, LGBl. 2008 Nr. 116 — gesetze.li (accessed 18 Oct 2026)
- Liechtensteinische Akkreditierungsstelle (Liechtenstein Accreditation Service) — gesetze.li (accessed 18 Oct 2026)
- Verordnung vom 3. November 1998 über das Öffentliche Auftragswesen (ÖAWV) — provision on proof of quality — gesetze.li (accessed 18 Oct 2026)
- Gesetz vom 19. Juni 1998 über das Öffentliche Auftragswesen (ÖAWG) — technical specifications — gesetze.li (accessed 18 Oct 2026)
Talk to a consultant
Plan your certification with the Frankfurt team.
Tell us your goals, locations and target date. We’ll help you define the scope, timeline and next steps.
germany@sterling-grc.com+1 201 263 4443 (global headquarters) · your nearest office and its number are at the top of this page
What would you like to achieve?
Choose a starting point. The enquiry form takes about a minute.
Book my free discovery callContinue to the enquiry form to share your details. Please do not include passwords, sensitive personal information or confidential files. A Sterling consultant replies within one working day. Privacy notice