In article 28(3) GDPR it is stated that a data processing agreement is a requirement if a controller wants to let a processor process their personal data. The article also states which information must be a part of the DPA.
A controller needs to notice that a separate data processing agreement needs to be written with each processor that process the controllers’ data.
Schrems II – Expert Legal Advise
Act with confidence today. Our experts are here to help you manage the Schrems II requirements. Measured and practical solutions. Support through the entire process. Transfer impact assessment. Dealing with supervisory authority. Enforcement action. Defending legal claims. Track record with leading European startup, mid-size companies and listed global enterprises.
Get a quote today from the business law firm Sharp Cookie Advisors