Context: It should be made clear up front that contracts are an area where specific legal advice should be sought. The detail given below gives an insight into the requirement stated within the GDPR. It will also be useful as a starting point to check the status of your current
Post archive - data controller
Context: The GDPR recognises that there will be situations where there are 2 or more ‘joint’ controllers. All controllers have a responsibility to ensure that the requirements of GDPR are delivered. Where this situation exists the regulation requires that arrangements are transparent and made available to the data subject.
Context: The GDPR introduces a requirement to have specific elements included in data processing contracts. When processing personal information there should be a controller processor contract in place – especially where there is a separate data controller and processor.