Controllers, processors and subprocessors in chains
Written By
Partner
UK
I am based in London and co-head Bird & Bird's International Privacy and Data Protection Group. I enjoy providing practical advice and solutions to complex legal issues.
Ruth Boardman wrote an insightful article for the International Association of Privacy Professionals (IAPP) covering the European Data Protection Board's Opinion 22/2024 which addresses key obligations in controller-processor-sub processor relationships under GDPR. It clarifies requirements for processors to disclose sub-processor details to controllers, controllers' duties to verify GDPR compliance throughout the chain, and contractual language allowing processors to follow controller instructions or applicable laws.
To delve into the full article click here.
Latest insights
More Insights
What You Need to Know When Using Facial Recognition Technology in China?
6 minutes Apr 08 2025
Gen AI at work: Hong Kong Privacy Commissioner publishes further AI guidance on the use of Gen AI by employees
Apr 03 2025
German Court Rules That Data Protection Breaches Can Be Prosecuted In Civil Courts Under The Unfair Competition Law
3 minutes Mar 31 2025