JD Supra

GDPR’s Most Frequently Asked Questions: Are processors required to fully indemnify controllers for the actions of their sub-processors and subcontractors?

The European Union's General Data Protection Regulation ("GDPR") is arguably the most comprehensive - and complex - data privacy regulation in the world. Although the GDPR went into force on May 25, ...
JD Supra

EDPB Opinion on controller accountability in sub-processing chains

On 9 October 2024, the European Data Protection Board (EDPB) published its Opinion 22/2024, clarifying the responsibilities of controllers when relying on processors and sub-processors. This guidance ...