|
Post by juthi52943 on Jan 6, 2024 1:00:00 GMT -5
Register of processing activities, external audit reports, recognized international certificates such as the ISO series. The assessment performed by the controller is a form of risk assessment, the result of which will largely depend on the type of processing entrusted to the processor and should be performed individually in relation to individual cases of entrustment. Taking into account the Job Function Email List nature, scope, context and purposes of processing, as well as the risk to the rights and freedom of natural persons. In doing so, the controller should take into account elements such as the processors expertise . technical expertise in relation to security measures and data breaches reliability reliability of the processor and the resources available to the processor. It is worth noting that expressed in Art. section GDPR, the obligation to use only processors that provide sufficient guarantees is a continuous, not one-off obligation. It does not end with the conclusion of the contract between the administrator and the processor. Form and content of the entrustment agreement The issue of entrusting data processing should be regulated in writing, including in electronic form.
|
|