Auditing your GDPR processors
The 🇩🇰 DPA's useful guidance on how to audit your processors, which you should do (and document) regularly!
Jun 30, 2022
—
9 min read
You might also like
Denmark Google Workspace for Education Chromebook case (Helsingørgate)
paid
–
12 min read
🇩🇰 DPA concludes the case, applies the dreaded EDPB Opinion and signal enforcement change – and shares takeaways in webinar. Must-read if you're in Denmark but crucial to everyone using third-country processors, especially US ones.
Norway DPA orders Helseplattformen to rectify shortcomings
paid
–
3 min read
Weird DPA conclusion on controller's responsibility 🤔, will wait for the final decision | 🇳🇴 Datatilsynet notifies Helseplattformen of their intent to order fixes to serious organisational and (less serious) technical deficiencies.
EDPB Opinion 22/2024: obligations when relying on (sub-)processors
paid
–
8 min read
📚 You must list all (sub-sub-sub-sub...)processors (name, address, contact person, processing activity, roles & responsibilities) and always verify they've provided 'sufficient guarantees'—though the extent might vary based on risk—also for onwards transfers.