A data processor is any organisation or body that processes personal data at your request and on your behalf. It is a legal requirement to have a Data Processor Agreement with any Third Parties who are processing personal data on your instruction.
A thorough Due Diligence process before engaging a Data Processor enables you to understand areas of liability and how these will be dealt with by both parties, as well as defining and clearly articulating each parties’ responsibilities. The document below forms part of a thorough due diligence assessment process.
– Third Party Due Diligence Assessment
