LIVE VIRTUAL TRAININGS
Learn in small groups from top experts and real-life examples

Expert Advice Community

Guest

IT Provider

  Quote
Guest
Guest user Created:   May 07, 2018 Last commented:   May 07, 2018

IT Provider

We use an IT service provider X (they are our data processors). Provider X sub-contracts out to Company Y. We pay Provider X for the services of Company Y. Does that mean we need a data processor agreement only with Provder X or also with Company Y ? Our IT Service Provider X has said that we must sign a separate agreement with company Y (also they haven't listed Company Y on DPA as sub-processors) .Should we have a signed agreement with Provider X sub-contractor Y ?
0 0

Assign topic to the user

EU GDPR DOCUMENTATION TOOLKIT

Step-by-step implementation for smaller companies.

EU GDPR DOCUMENTATION TOOLKIT

Step-by-step implementation for smaller companies.

Expert
Andrei Hanganu May 07, 2018

Answer:

Company Y is clearly acting as a sub-processor of company X, thus, company Y and company X need to have a DPA among themselves. I definitely not you who needs to sign a DPA with company Y unless you contract directly a service from them.

To find out more about sub processors you can also check out our free course “EU GDPR Foundations Course” https://training.advisera.com/se/eu-gdpr-foundations-course//
Quote
0 0

Comment as guest or Sign in

HTML tags are not allowed

May 07, 2018

May 07, 2018

Suggested Topics

Guest user Created:   Mar 03, 2021 EU GDPR
Replies: 1
0 0

Data protection: IT service provider

Guest user Created:   Feb 18, 2019 EU GDPR
Replies: 1
0 0

Gateway payment provider