Wherever a sub-processor is engaged, the identical data protection obligations inside the contract between the controller and processor have to be imposed within the sub-processor By the use of contract or other “organisational actions.”[45] The processor will remain entirely liable towards the controller for performance of your sub-processor’s obligations. However, https://medium.com/@cybersecurityservice/