Talking Data Protection: Appointing a data processor - from due diligence to exit

In this episode, we explain how to manage the full lifecycle of appointing a supplier to process personal data, from confirming whether it is a processor, through risk-based due diligence and an Article 28-compliant contract, to ongoing oversight and a practical exit plan. We also discuss sub-processors, international transfers, security, data subject requests, breach reporting and AI-related uses of data.