How to comply with EU GDPR as a data processor
Assign topic to the user
Answer:
The question is much too broad to provide you with an exhaustive answer.
The key for a processor to be compliant with the requirements of the EU GDPR is to make sure that it takes into account the obligations set forth in article 28 – Processors (https://advisera.com/eugdpracademy/gdpr/processor/).
As a processor you also need to :
Process only personal data on the instructions of the controller unless required to process for other purposes by Union or Member State law (but not foreign law, such as US law. This will be a major headache for many foreign processors);
To keep a record of processing carried out on behalf of a controller (see Record keeping obligations);
To cooperate with the supervisory authorities;
To implement appropriate security measures ;
To notify the controller of any personal data breach without u ndue delay;
To appoint a data protection officer in certain cases ;
To comply with the rules on transfers of personal data outside of the Union.
To learn more about processors obligations check our free webinar “EU GDPR Foundations Course” (https://advisera.com/training/eu-gdpr-foundations-course//)
Comment as guest or Sign in
Sep 11, 2018