Guest user Created: Jul 26, 2018 Last commented: Jul 26, 2018

Data Processing Agreement

Company A has an obligation under law such and such to collect personal data from individuals for KYC purposes. Can company A outsource to company B to do the KYC and what parameters have to be looked in according to EU GDPR?

0 0

Assign topic to the user

Select user

Expert

Andrei Hanganu Jul 26, 2018

Answer:

From the example you have provided company A is acting as a data controller and company B would act as a data processor. In this instance a Data Processing Addendum/Agreement would need to be signed between company A and company B to ensure that company B processed the data on behalf of company B pursuant to the provisions of EU GDPR article 23 – Processor (https://advisera.com/eugdpracademy/gdpr/processor/).

To find out more about controllers and processors check out our free “EU GDPR Foundations Course” (https://advisera.com/training/eu-gdpr-foundations-course//).

Quote

0 0

Comment as guest or Sign in

HTML tags are not allowed

Name *

Email *

I accept the Privacy and Terms

Notify me when someone replies

Jul 26, 2018

Expert Advice Community