Are there obligations for controllers to establish controls with respect to data processors?
Last review date: 20 December 2024
Yes.
The obligations are as follows:
☒ controllers must conduct due conduct diligence on the processor to ensure it will provide appropriate security and processing of the personal data