Should vendors be able to pass along costs of GDPR compliance?
What wasn’t obvious when EU General General Data Protection Regulation came into force, was that vendors would swiftly pass along […]
data processors
Managing commercial risk within the supply chain post
In the pre-GDPR days, it was fairly clear where risk and liability lay with regards to data protection issues within […]
Majority of companies fear 3rd-party vendors make them vulnerable to GDPR legal risks
Only 32 percent of companies say they are fully GDPR-compliant, according to the Demandbase/Demand Metric report. The report does show that […]
Global companies lacking GDPR oversight of sub-contractors
The majority of global companies admit that they do not have appropriate oversight of third parties and sub-contractors despite the […]
Vetting and contracting with processors under GDPR
Although the GDPR accommodates modern business practices of outsourcing data storage and analytics, as well as marketing communication and other […]
US Data Processors and GDPR Impact
On May 25, 2018 the EU will have the right to fine and regulate foreign “processors” of EU subject data, […]
Third-party risk under the GDPR
According to recent research by RSA, failure to protect customer data is creating long-term business problems for organizations. That was […]
Processor compliance with the GDPR
The General Data Protection Regulation expands the scope of enforcement to include a number of companies that are not based […]
CNIL publishes guidance for data processors
On 29 September 2017, the French Data Protection Authority (the CNIL) released a guide for data processors on implementing the […]
Businesses will be considered ‘aware’ of data breaches under GDPR when their data processors notice the breach
Businesses that outsource the processing of personal data to other companies will be said to be aware of data breaches […]
What’s wrong with the ICO’s draft guidance on controller-processor contracts?
Controller-processor contracts and liabilities don’t seem destined for any guidance from the Article 29 Working Party, at least according to […]
When is a vendor a processor?
Privacy professionals have been involving themselves in their organizations’ vendor management programs for a few years now. Indeed, according to […]