Topic

Data processing contracts

Written agreements between a controller and a processor governing how personal data may be handled, including the clauses data protection law makes compulsory.

Current clusters

security1 publisher

ICO puts its processor guidance under review after the Data (Use and Access) Act

The page that sets out how UK processors must contract with controllers and authorise sub-processors now says it may change under the Data (Use and Access) Act. The duties on it apply meanwhile, and the revision timetable sits elsewhere.

Publishers:cy.ico.org.uk

Reality

Evidence78
Adoption: Insufficient
Hype gap0
Incentives40
Confidence72