Hi, further to the two previous threads, please could you point me in the right direction for updated docuements/proof of GDPR compliance/terms and agreeements/privacy policy. Thanks!
As a processor/subprocessor of data we also need to have in place a data processing agreement - please could you advise on this?
(Under Article 28(4) of the GDPR, processors have an obligation to impose upon sub-processors "the same" obligations as those imposed upon the processor in the controller-processor contract.)
Many thanks!