(ii) any other correspondence, request or complaint received from a person, supervisory authority or other third party concerned in connection with the data processing. In the event that such a request, correspondence, request or complaint is addressed directly to the data processor, the processor must immediately inform the data controller and provide all details. `If the personal data breach is likely to result in a high risk to the rights and freedoms of natural persons, the personal data protection officer shall immediately inform the data subject of the personal data breach.` A data subject may be a data subject, a data controller and a data processor, depending on his or her relationship with a number of personal data. A company that acts primarily as a data processor will often be responsible for the data. As you can see, a data processing agreement is not only necessary to allow a company to benefit from IT services. It is also mandatory and enforceable by law. What are the processing activities? The GDPR doesn`t say so, but it does give three scenarios in which you might need one: your data processing agreement should remind data controllers/processors that you`ve hired the need to list the records listed above. Data controllers must have a processing agreement with all the data processors they have used. The agreement may be drawn up by the controller or subcontractor. However, it is binding on both parties. A GDPR data processing agreement is required whenever a data controller commissions a data processor to provide data processing services.

(iii) implement appropriate technical and organisational measures so that the processing meets the requirements of current data protection legislation and guarantees the protection of the rights of data subjects; (B) The company wishes to subcontract to the subcontractor certain services that involve the processing of personal data. All these points must be made and agreed before a controller can securely allow a processor to transfer personal data to other data processors. . . .