Topic
Data Processor
10 published works
Data Privacy Dish
Is a market research company a processor or controller under the GDPR?
A controller refers to the entity that determines the “purpose and means” of how personal data will be processed. Determining the “purpose” of processing refers to deciding why information will…
La Revue
Lumières sur le projet de lignes directrices du CEPD sur les Responsables de traitement et Sous-traitants dans le cadre du RGPD (3ème partie)
Partie 3 : Les responsables conjoints de traitement Cet article est le troisième d’une série sur le projet de Lignes directrices 07/2020 sur les notions de responsable de traitement et de…
Franchise Law Update
Key Data Privacy Considerations for Vendor Management
Key takeaways from my partner, Odia Kagan's recent presentation titled “Service Providers v. Data Processors: What Should Your Agreement Address?” with Lexology and Exterra: As the “business,” the “buck stops…
Inside Privacy
German Supervisory Authority Publishes New Standard Clauses for Processors
By Kristof Van Quathem, Anna Sophia Oberschelp de Meneses
On April 9, 2020, the German Supervisory Authority of Baden-Wuerttemberg published standard contractual clauses for data processors pursuant to Article 28(8) GDPR. It is the first German Supervisory Authority to…
Privacy & Information Security Law Blog
CNIL Publishes GDPR Guidance for Data Processors
On September 29, 2017 the French Data Protection Authority published a guide for data processors to implement the new obligations set by the EU General Data Protection Regulation.
HL Chronicle of Data Protection
Future-Proofing Privacy: Data Processors’ New Obligations
By HL Chronicle of Data Protection
Part 8 of Future-Proofing Privacy: Data Processors' New Obligations. The Regulation will impose a number of compliance obligations and possible sanctions directly on service providers. This is a significant change…
Global Media and Communications Watch
Part 8: Data Processors’ New Obligations
By Katie McMullan, Dr. Christian Tinnefeld
What’s the deal? The Regulation will have a significant impact on service providers/vendors (i.e. data “processors”) and organisations that engage them because: The Regulation imposes a number of detailed…
HL Chronicle of Data Protection
Part 8: Data Processors’ New Obligations
By Katie McMullan, Dr. Christian Tinnefeld
The General Data Protection Regulation will have a significant impact on service providers/vendors (i.e. data “processors”) and organisations that engage them by imposing a number of detailed obligations and restrictions…
La Revue
BCR sous-traitants : plus d’explication par le Groupe de l’article 29
Comme nous vous l’avions signalé dans un article précédent (BCR sous-traitants : enfin !) le Groupe de l’article 29 a adopté en 2012 le « WP 195 », document de référence incluant…
HL Chronicle of Data Protection
CNIL Cloud Guidelines Address Controller vs. Processor Issues
The French CNIL's new guidelines on cloud computing revisit the tricky question of whether a cloud provider is a data processor or a data controller under French data protection law.…