GDPR-28-15 Documentation 28 — Processor

Maintain contracts in written form

Description

The contract or other legal act referred to in paragraphs 3 and 4 must be in writing, including in electronic form.

Sign in to view the full obligation text, AI-generated applicability analysis, evidence checklists, and compliance mapping.

Use only processors with sufficient guarantees

Obtain authorization before engaging sub-processors

Inform controller of intended sub-processor changes

Establish binding contract with processor

Process only on documented controller instructions

Inform controller of legal processing requirements

Ensure personnel confidentiality commitments

Assist controller with data subject rights requests

Assist controller with compliance obligations

Delete or return data after service end

ReguLume automatically maps regulatory obligations to your system inventory, identifies compliance gaps, and generates remediation plans.

Get Started