Data Processing Agreements: How to Audit Your Vendors
The data processing agreement is signed, and in many shops that is where processor management ends. Which control duties Article 28 GDPR creates, why sub-processors belong in the picture and which records hold up when a supervisory authority asks.