Expert Advice Community

Guest

Third party

  Quote
Guest
Guest user Created:   Jan 20, 2021 Last commented:   Jan 22, 2021

Third party

Please advise when third party disclose PII data only by visiting data processor premise and look at data at data processor premise noting that they don’t have remote access to this data , what is the nature of processing here and do we have to sign with them any agreement. And what is the case if they have remote access to this data
Thank you

0 0

Assign topic to the user

EU GDPR DOCUMENTATION TOOLKIT

Step-by-step implementation for smaller companies.

EU GDPR DOCUMENTATION TOOLKIT

Step-by-step implementation for smaller companies.

Expert
Alessandra Nisticò Jan 22, 2021

Among data controllers and data processors, it is always required a Data Processing Agreement (DPA) by Article 28 GDPR either if the processor has remote access to data or not. The nature of processing is determined by the controller while the processor processes data on the controller’s behalf under a written legal agreement with binding effects.

Here you can find more information about the data controller and the processor, consent, and data subjects:

In order to understand how to manage data subjects PII, you can consider enrolling in our free online training EU GDPR Foundations Course: https://training.advisera.com/se/eu-gdpr-foundations-course//

Quote
0 0

Comment as guest or Sign in

HTML tags are not allowed

Jan 20, 2021

Jan 22, 2021

Suggested Topics

Guest user Created:   Jun 27, 2020 EU GDPR
Replies: 0
0 0

Third Party Compliance

Guest user Created:   May 04, 2018 EU GDPR
Replies: 1
0 0

Third Party Management