See European Regulation on the Protection of Personal Data Guide Sub-Contractor Edition, September 2017.

  • Are you a contractor within the meaning of European Regulation on data protection?
  • Are you subject to EU regulation on data protection?
  • What is the main change introduced by the European regulation for contractors?
  • What are your obligations as of May 25, 2018?
  • Where to start?
  • If I use another subcontractor, what are my obligations?
  • The current contracts with my clients they need to be changed?
  • What is my role in the event of data breach?
  • What is my role as part of the impact assessment?
  • Can I get the one-stop mechanism?
  • What are my obligations if I am not established in the EU?
  • What are the risks in case of breach of my obligations?
  • Example of contract terms subcontracting
Photo of Amy Carlson Amy Carlson

Amy Carlson is Of Counsel in the firm’s Corporate group and has more than 20 years of experience assisting clients with a wide range of privacy matters. Using her understanding of the intersection of law and technology along with her understanding of business…

Amy Carlson is Of Counsel in the firm’s Corporate group and has more than 20 years of experience assisting clients with a wide range of privacy matters. Using her understanding of the intersection of law and technology along with her understanding of business, she helps companies develop and implement privacy policies, plans and audits, as well as manage data breaches. Amy also has experience with e-commerce, intellectual property, telecommunications, security policy, international privacy and export control issues. Amy is a Certified Information Privacy Professional and a Certified Information Privacy Manager by the International Association of Privacy Professionals. She co-leads the firm’s privacy initiative.