Responsibility when using processors and sub-processors
The EDPB comments on obligations and controls when using service providers and sub-processors in the context of processing on behalf of a data controller.
Michael Plankemann is a proven expert in data protection law and advises in particular on increased requirements and in cross-sectional areas.
Due to his long experience as an auditor for audits according to ISO 27001 based on IT-Grundschutz, he is also in demand for the evaluation of IT security as well as the assessment of risks.
The EDPB comments on obligations and controls when using service providers and sub-processors in the context of processing on behalf of a data controller.
How to best protect your organisation, employees, and infrastructure against phishing – an overview of specific measures.
Under the NIS2 Directive, significantly more organisations will be required to take increased information security measures. We explain who is affected by the Directive and what organisations should do now.
In order to impose GDPR fines, it must be established who is responsible for the processing activity and whether and, if so, who must be at fault. The CJEU has now provided clarity.
How companies can set up an ISMS and thus not only improve their information security – comprehensibly explained by a practitioner.
When employees of processors work remotely, the controller’s right to control is regularly torpedoed. We shed light on typical arguments of service providers and refute them.
activeMind.legal Rechtsanwälte is a law firm specialising in data protection law. With our partner firms in the UK and Switzerland, we cover all aspects of GDPR compliance and national data protection law in Europe.
activeMind.legal
Rechtsanwaltsgesellschaft m. b. H
Potsdamer Straße 3
80802 Munich, Germany
+49 (0) 89 / 919 29 49 00
activeMind.legal
Rechtsanwaltsgesellschaft m. b. H
Kurfürstendamm 56
10707 Berlin, Germany
+49 (0) 30 / 770 19 10 70
© 2016-2025 activeMind.legal
Subscribe to our free newsletter: